nerdexam
GIAC

GPEN · Question #268

Which of the following is an open source Web scanner?

The correct answer is A. Nikto. Nikto is a well-known open source web server scanner that tests for dangerous files, outdated software, and common misconfigurations.

Web Application Penetration Testing

Question

Which of the following is an open source Web scanner?

Options

  • ANikto
  • BGFI LANguird
  • CNetRecon
  • DInternet scanner

How the community answered

(55 responses)
  • A
    84% (46)
  • B
    5% (3)
  • C
    9% (5)
  • D
    2% (1)

Why each option

Nikto is a well-known open source web server scanner that tests for dangerous files, outdated software, and common misconfigurations.

ANiktoCorrect

Nikto is a free, open source command-line web server scanner released under the GPL license and maintained on GitHub. It performs comprehensive tests including checks for over 6700 potentially dangerous files, outdated server versions, and version-specific problems. Its open source nature and web-application focus make it the correct answer.

BGFI LANguird

GFI LANguard is a commercial network security scanner focused on patch management and network auditing, not an open source web scanner.

CNetRecon

NetRecon was a commercial network vulnerability scanner developed by Symantec and is neither open source nor web-specific.

DInternet scanner

Internet Scanner was a commercial vulnerability assessment product from IBM ISS and is not open source.

Concept tested: Open source web application vulnerability scanning tools

Source: https://cirt.net/Nikto2

Topics

#Nikto#web scanner#open source tools#web vulnerability scanning

Community Discussion

No community discussion yet for this question.

Full GPEN Practice