Hola!
Muy buenas a todos/as!
Empezamos la semana recomendando una herramienta que , personalmente a mi me gusta mucho 
. Se trata de Nikto! Seguro que todos concocéis ya la herramienta.
Nikto tiene las siguientes características:
- SSL Support (Unix with OpenSSL or maybe Windows with ActiveState’s
Perl/NetSSL)- Full HTTP proxy support
- Checks for outdated server components
- Save reports in plain text, XML, HTML, NBE or CSV
- Template engine to easily customize reports
- Scan multiple ports on a server, or multiple servers via input file (including nmap output)
- LibWhisker‘s IDS encoding techniques
- Easily updated via command line
- Identifies installed software via headers, favicons and files
- Host authentication with Basic and NTLM
- Subdomain guessing
- Apache and cgiwrap username enumeration
- Mutation techniques to “fish” for content on web servers
- Scan tuning to include or exclude entire classes of vulnerability
checks- Guess credentials for authorization realms (including many default id/pw combos)
- Authorization guessing handles any directory, not just the root
directory- Enhanced false positive reduction via multiple methods: headers,
page content, and content hashing- A “single” scan mode that allows you to craft an HTTP request by
hand- Reports “unusual” headers seen
- Interactive status, pause and changes to verbosity settings
Nikto “hace bastante ruido” en la batería de pruebas que realiza, lo he usado contra uno de mis sistemas:
nikto -host http://www.miweb.es
- Nikto v2.1.4
—————————————————————————
+ Target IP: 192.168.1.69
+ Target Hostname: http://www.miweb.es
+ Target Port: 80
+ Start Time: 2012-03-19 17:14:37
—————————————————————————
+ Server: Apache/2.2.20 (PowerStack)
+ Retrieved x-powered-by header: PleskLin
+ No CGI Directories found (use ‘-C all’ to force check all possible dirs)
+ ETag header found on server, inode: 4547374, size: 834, mtime: 0x49f27159d1680
+ Allowed HTTP Methods: GET, HEAD, POST, OPTIONS
+ DEBUG HTTP verb may show server debugging information. See http://msdn.microsoft.com/en-us/library/e8z01xdh%28VS.80%29.aspx for details.
+ /config.php: PHP Config file may contain database IDs and passwords.
+ OSVDB-12184: /index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
+ /wp-app.log: WordPress’ wp-app.log may leak application/system details.
+ /login.php: Admin login page/section found.
+ 6456 items checked: 0 error(s) and 8 item(s) reported on remote host
+ End Time: 2012-03-19 17:58:12 (2615 seconds)
En el resultado del log podemos ver los datos que ha coneguido extraer. Nikto nos puede servir para hacer una serie de batería de prueba en concreto.
La web oficial del proyecto de Nikto
Entrada escueta para lo que será una semana movidita.
Saludos!
