| 1 | 2010-06-15 |
|---|
| 2 | - Fix for #127: dav methods are treated specially and reported all at once |
|---|
| 3 | - Update nikto.conf to switch tests to always have the (report:500) parameter |
|---|
| 4 | 2010-06-10 |
|---|
| 5 | - Updates to read known headers on the fly, rather than make requests |
|---|
| 6 | for them |
|---|
| 7 | 2010-05-29 |
|---|
| 8 | - Ticket 156: Update system couldn't update nikto_core.plugin |
|---|
| 9 | - Ticket 152: HTTP Version set in nikto.conf over-ridden |
|---|
| 10 | 2010-05-27 |
|---|
| 11 | - Fixed a bug with the order of parameters in hooks (broke parameters being passed to some plugins) |
|---|
| 12 | - Added the parameter "report" to tests plugin to report when completed x number of tests |
|---|
| 13 | 2010-05-25 |
|---|
| 14 | - Ticket 147: Grab HTTP information on the fly, deprecate get_banner |
|---|
| 15 | - Stop Whisker producing an error when talking HTTP to HTTPS during port_check |
|---|
| 16 | 2010-05-11 |
|---|
| 17 | - Tickets 132 and 153: Properly check for HTTP and HTTPS ports in cache. |
|---|
| 18 | 2010-05-06 |
|---|
| 19 | - Ticket 136: Moved set_scan_items to only run once, should speed things up with multiple targets |
|---|
| 20 | 2010-04-12 |
|---|
| 21 | - Ticket 144: Cleaned up map_codes to use general rules, still needs some for redirection |
|---|
| 22 | - Ticket 145: Added OSVDB 0 to orphan items in db_tests |
|---|
| 23 | 2010-04-11 |
|---|
| 24 | - Ticket 125: fetch is dead, long live nfetch |
|---|
| 25 | - Moved URI error handling and reporting result to nfetch, rather than being in nikto_tests (Ticket 139, partial) |
|---|
| 26 | - Ticket 141: pre-compile RE in content_search to give some speed-up |
|---|
| 27 | 2010-04-10 |
|---|
| 28 | - Merged apacheusers and apache_enum_users together |
|---|
| 29 | - Add facillity for a plugin to inform which options it can take |
|---|
| 30 | 2010-04-09 |
|---|
| 31 | - Ticket 137: Added -ask to override nikto.conf's UPDATES value (same options) |
|---|
| 32 | 2010-04-01 |
|---|
| 33 | - Ticket 134: Added documentation of -config to usage_short |
|---|
| 34 | 2010-03-26 |
|---|
| 35 | - Added nbe output plugin written by Frank Breedijk |
|---|
| 36 | 2010-03-15 |
|---|
| 37 | - Ticket 130: Added -D E to show HTTP errors, otherwise suppress. |
|---|
| 38 | - Ticket 129: Change references for config.txt to nikto.conf. |
|---|
| 39 | 2010-03-10 |
|---|
| 40 | - Moved do_auth to a postfetch plugin. |
|---|
| 41 | 2010-03-09 |
|---|
| 42 | - Removed dead code from fetch(). |
|---|
| 43 | - Optimizations in nfetch(), nikto.pl, & elsewhere. |
|---|
| 44 | - Added support for prefetch and postfetch hooks. |
|---|
| 45 | - Moved content_search to a plugin. |
|---|
| 46 | - Some tuning around plugin execution. |
|---|
| 47 | - Ticket 126: subdomain plugin tries to guess domain on unqualified hostname. |
|---|
| 48 | 2010-03-07 |
|---|
| 49 | - Updated user_enum_apache to use Plugins instead of mutate. |
|---|
| 50 | - Rewrote the macro expanding bit to make it more efficient. |
|---|
| 51 | 2010-03-03 |
|---|
| 52 | - Mutate 1 now wrapped into nikto_tests and doesn't take up anywhere near the amount of memory! |
|---|
| 53 | 2010-02-28 |
|---|
| 54 | - Starting to deprecate mutate by replacing with plugin options. -mutate 2 (passfiles) is now implemented within tests and uses less memory. |
|---|
| 55 | 2010-02-10 |
|---|
| 56 | - Updated -check_updates to use nfetch instead of fetch |
|---|
| 57 | 2010-02-09 |
|---|
| 58 | - Updated -Plugins support |
|---|
| 59 | 2010-02-08 |
|---|
| 60 | - Add filename support to rm_active_content |
|---|
| 61 | - Ticket 122: Use db_404_strings as a higher priority |
|---|
| 62 | - Ticket 122: Cleanup db_404_strings to prevent over-matching |
|---|
| 63 | 2010-02-05 |
|---|
| 64 | - Added basic support for -D s (scrub, removes some information from the log) |
|---|
| 65 | 2010-02-04 |
|---|
| 66 | - Match plugin names case-insensitive |
|---|
| 67 | - Warn if RFIURL is undefined |
|---|
| 68 | 2010-01-20 Nikto 2.1.1 |
|---|
| 69 | - Ticket 117: Fixed SKIPPORTS |
|---|
| 70 | - Ticket 116: Moved User-Agent string to nikto.conf |
|---|
| 71 | - Ticket 116: Added dynamic variables to User-Agent (Testid, Evasion methods) |
|---|
| 72 | - Ticket 95: Added support for OSVDB, now the fun bit of filling it in |
|---|
| 73 | - Ticket 111: Basic syntax checks for all databases |
|---|
| 74 | - Ticket 109: Added an extra optional <ssl /> element to xml output to contain the SSL date. Need to do similar for html, txt and csv |
|---|
| 75 | - Ticket 106: Shorts authentication being successful if an error is returned |
|---|
| 76 | - Ticket 107: Support for short reads in LW2.5 |
|---|
| 77 | - Ticket 98: If -Format is missed guess the format based on file extension in -output. Default is none if -output is omitted. |
|---|
| 78 | - Ticket 96: Multiple index file enhancements for groups and better unique file identification |
|---|
| 79 | - Ticket 103: <description> content in xml report is now wrapped in CDATA |
|---|
| 80 | - Ticket 110: Mutate now respects db variables |
|---|
| 81 | - Ticket 97: Fix for response caching |
|---|
| 82 | - Ticket 99: Spelling disagreements between Brits and Americans |
|---|
| 83 | - Added @RFIURL to nikto.conf for a remote file include location, and supporting code. |
|---|
| 84 | - Added ~2300 RFI tests from the combined RSnake/OSVDB list |
|---|
| 85 | - Removed NMAP and NMAPOPTS from nikto.conf as it is no longer used/supported |
|---|
| 86 | - Reporting: simplify xml/html code, fix a bug when a space is in the uri, and load ony needed templates |
|---|
| 87 | - Enable 2 new LW evasion tacticts (carriage return or binary value as request spacer) |
|---|
| 88 | - Added support to select plugins via -Plugins and -list-plugins option to list current plugins |
|---|
| 89 | - Major bug fix for proxy usage |
|---|
| 90 | - Don't report p3p header as unusual |
|---|
| 91 | - Various changes to aid future binary db usage for mutates |
|---|
| 92 | - Various changes to aid future multi-threading |
|---|
| 93 | - Fix for multiple index files |
|---|
| 94 | 2009-12-21 nikto.pl |
|---|
| 95 | - Ticket 100: Fix for reading home directory on Windows |
|---|
| 96 | - Some new additions to db_realms and db_embedded |
|---|
| 97 | 2009-08-29 templates/xml* docs/nikto.dtd |
|---|
| 98 | - Added <statistics /> tag for scan/host statistics |
|---|
| 99 | 2009-08-25 plugins/db_httpoptions |
|---|
| 100 | - Ticket 89: - remove TRACE and TRACK from the db |
|---|
| 101 | 2009-08-19 plugins/nikto_headers |
|---|
| 102 | - Added test for asp source code disclosure through the Translate header |
|---|
| 103 | 2009-08-13 plugins/* plugins/nikto_embedded plugins/db_embedded |
|---|
| 104 | - Various fixes to use nfetch and fix proxy use |
|---|
| 105 | - New plugin added to identify embedded devices |
|---|
| 106 | 2009-08-12 plugins/nikto_core |
|---|
| 107 | - New fetch (nfetch) sub added which uses a local request/result hash. All requests should use this instead of fetch. |
|---|
| 108 | - Patch to add a URI cache within fetch, can be disabled with -nocache |
|---|
| 109 | 2009-08-04 plugins/nikto_core |
|---|
| 110 | - Patch to actually report the URI when it works out a password |
|---|
| 111 | - Added test for DEBUG HTTP verb |
|---|
| 112 | 2009-08-03 plugins/nikto.pl |
|---|
| 113 | - Put in a quick catch for port ranges (e.g. 80-90) if people use the old style of port entries |
|---|
| 114 | - Put in a simple signal handler to close reporting if a sigint is caught |
|---|
| 115 | 2009-08-02 plugins/nikto_multiple_index db_multiple_index |
|---|
| 116 | - Added check for multiple index files for request #16 |
|---|
| 117 | - Turned standard headers into a database file to close off #22 |
|---|
| 118 | 2009-08-01 plugins/* nikto.pl |
|---|
| 119 | - Fixes for xml reporter to allow multiple hosts |
|---|
| 120 | - Fixes for html, txt and csv exporters |
|---|
| 121 | - Tickets 80 and 85 |
|---|
| 122 | 2009-07-31 plugins/* nikto.pl |
|---|
| 123 | - Fix for ePO agent/HP iLO to not report for each known type of webserver |
|---|
| 124 | - Big changes to the way nikto assigns targets to remove globals, have deliberately broken nmap scanning and allowing port ranges. |
|---|
| 125 | 2009-07-20 plugins/nikto_core plugins/nikto_outdated db_tests db_outdated |
|---|
| 126 | - Fix to ensure that -Tuning works as expected, fixes ticket #84 |
|---|
| 127 | - Fix to add a warning if a web server has been configured to restrict information on its server banner, fixes ticket #66 |
|---|
| 128 | - Minor amendment to lightttpd version to fix ticket #67 |
|---|
| 129 | - Fix to nikto_core to make dbcheck work! |
|---|
| 130 | - New item for ticket #75 |
|---|
| 131 | 2009-06-30 plugins/nikto_dictionary_attack |
|---|
| 132 | - Add plugin to use dirbuster lists with mutate 6 and mutate-options |
|---|
| 133 | - couple of minor fixes to prevent errors on Windows and exporting as text |
|---|
| 134 | 2009-06-27 plugins/nikto_user_enum_cgiwrap.plugin |
|---|
| 135 | - Managled cgiwrap and apache plugins together and allow use of a dictionary (to speed things up). Also made it work with new reporting style |
|---|
| 136 | - Added -mutate-options switch |
|---|
| 137 | 2009-06-15 plugins/nikto_reports.plugin templates/xml_end |
|---|
| 138 | - Fixed bug with xml not terminating correctly |
|---|
| 139 | 2009-05-11 plugins/nikto_core.plugin plugins/nikto_subdomain.plugin |
|---|
| 140 | - Added subdomain buteforcer as mutate option 5, thanks to Ryan DewHurst |
|---|
| 141 | - Added extra tests to pull information if scanning ePO agent or HP WBEM |
|---|
| 142 | - Added test to recognise a Dell Remote Access Console |
|---|
| 143 | - Added -no404 switch to disable 404 checking. Warning, this produces a lot of false positives at the moment |
|---|
| 144 | 2009-01-10 plugins/nikto_core.plugin |
|---|
| 145 | - Added fix for #73 to apply multiple variables for tests, supplied by Laurent Licour |
|---|
| 146 | - Removed test_target function as now done in the nikto_test plugin |
|---|
| 147 | - Added support for Allow directive in robots.txt |
|---|
| 148 | - Added exit if cannot connect to a defined proxy |
|---|
| 149 | 2008-11-11 plugins/nikto_core.plugin nikto.pl plugins/nikto_reports.plugin |
|---|
| 150 | - Added report phase to plugin runner |
|---|
| 151 | 2008-10-09 plugins/nikto_core.plugin nikto.pl |
|---|
| 152 | - Further tunings to authentication code to simplify it. |
|---|
| 153 | 2008-10-02 plugins/nikto_core.plugin nikto.pl |
|---|
| 154 | - Altered authentication code to make it simpler. |
|---|
| 155 | - Now supports NTLM authentication. |
|---|
| 156 | 2008-09-24 plugins/nikto_core.plugin db_tets |
|---|
| 157 | - Fixed problem with nikto using authentication provided from the command line. It now adds it to the list of realms. |
|---|
| 158 | - Added extra test to highlight localstart.asp if it is the default page. |
|---|
| 159 | - Added tests to identify Ampache. |
|---|
| 160 | 2008-09-23 plugins/*.plugin |
|---|
| 161 | - Added support for conditional recon and scan plugins. |
|---|
| 162 | 2008-09-21 plugins/*.plugin |
|---|
| 163 | - Changes for new plugin running structure; it needs to be finished (conditional plugins and report methods) but it is good enough to release now. |
|---|
| 164 | 2008-09-20 plugins/nikto_core.plugin plugins/nikto_cgi.plugin nikto.pl plugins/nikto_reports.plugin templates/xml_host_head.tmpl docs/nikto.dtd |
|---|
| 165 | - Fixes to ensure nikto produces less perl warnings |
|---|
| 166 | - Fix for ticket #59: add vhost to xml output |
|---|
| 167 | 2008-09-16 plugins/nikto_core.plugin plugins/nikto_httpoptions.plugin |
|---|
| 168 | - Fix for ticket #37 |
|---|
| 169 | - Allow fetch to optionally call LW2::http_fixup_request |
|---|
| 170 | - Better handling of extra headers within fetch |
|---|
| 171 | 2008-09-14 plugins/db_server_msgs plugins/nikto_*.plugin |
|---|
| 172 | - Update server messages to dynamic database format |
|---|
| 173 | - Altered all plugins to use a separate RESULTS array for storing results; meaning that it is easier to abstract |
|---|
| 174 | - Added add_vulnerability method to nikto_core to report vulnerabilities and reduce code size. |
|---|
| 175 | - Added ability to add an extra hash to fetch() to allow extra headers to be added. |
|---|
| 176 | 2008-09-12 plugins/nikto_core.plugin plugins/nikto_httpoptions.plugin plugins/db_httpoptions plugins/nikto_favicon plugins/db_favicon |
|---|
| 177 | - Fix for ticket #38: httpoptions are drawn from a database |
|---|
| 178 | - Now setup to allow dynamic databases, rather than all being imported by nikto_core at start time |
|---|
| 179 | - Altered favicon database to use dynamic database |
|---|
| 180 | 2008-09-06 plugins/nikto_core.plugin tmpl/htm_close.tmpl |
|---|
| 181 | - Fix for ticket #53: all plugins now show last mod date |
|---|
| 182 | - Fix for ticket #51: updated copyright date in HTML |
|---|
| 183 | 2008-09-04 plugins/nikto_core.plugin |
|---|
| 184 | - Ticket 55: introduced by the solution for ticket #44 |
|---|
| 185 | - Ticket 53 |
|---|
| 186 | 2008-08-12 plugins/db_outdated -- Nikto 2.03 |
|---|
| 187 | - Fix for Jetty to latest version, fixes ticket #49 |
|---|
| 188 | 2008-08-07 docs/nikto_manual.html |
|---|
| 189 | - New export of the manual from the docbook |
|---|
| 190 | - Updated versions in nikto.pl |
|---|
| 191 | 2008-08-06 plugins/db_outdated |
|---|
| 192 | - Added various new versions |
|---|
| 193 | 2008-08-05 plugins/db_favicon |
|---|
| 194 | - Fix for ticket #45 |
|---|
| 195 | - Added favicons for Roku Soundbridge and Ampache |
|---|
| 196 | 2008-07-14 plugins/nikto_headers.plugin |
|---|
| 197 | - Changes to look at non-standard headers |
|---|
| 198 | - Changes to examine Apache's ETag header |
|---|
| 199 | 2008-07-07 nikto.pl plugins/nikto_core.plugin plugins/nikto_reports.plugin |
|---|
| 200 | - Fix for ticket #41 - a rather nasty bug that's been in nikto 2 since its inception; where variables weren't fully expanded. |
|---|
| 201 | 2008-07-02 plugins/nikto_core.plugin |
|---|
| 202 | - Fix for ticket #11 - change CGIDIRS test so that they're not hardcoded. The reponse codes are now kept in a variable in db_variables |
|---|
| 203 | - Applied same to enumerating apache users plugin |
|---|
| 204 | - Fix for ticket #39 - we now check whether getoptions failed, show usage and exit with a code of one. This also means that it will exit gracefully if a parameter is missed out when one is required. |
|---|
| 205 | 2008-06-24 plugins/nikto_core.plugin |
|---|
| 206 | - Fix for ticket #35 - allow multiple HTTP methods to identify an HTTP server, these are set with the variable CHECKMETHODS in config.txt |
|---|
| 207 | - Fix for a bug in the nmap reader where it would ignore the IP address if it nmap didn't return a hostname. |
|---|
| 208 | 2008-06-22 plugins/db_tests |
|---|
| 209 | - Fix for ticket #26 - stop domino tests producing false positives |
|---|
| 210 | 2008-06-20 plugins/nikto_httpoptions.plugin |
|---|
| 211 | - Fix for ticket #30 - ensure that propfind has the right OSVDB tag |
|---|
| 212 | 2008-04-22 plugins/nikto_outdated.plugin |
|---|
| 213 | - Change to allow stop duplication of items when scanning more than one host. Fix for bug 28 |
|---|
| 214 | 2008-04-16 plugins/nikto_core.plugin |
|---|
| 215 | - Change to allow reading of a host list from stdin |
|---|
| 216 | - Fix for enhancement 10: read from nmap output (only -oG) |
|---|
| 217 | 2008-04-15 plugins/nikto_core.plugin |
|---|
| 218 | - Fixes for bug 25: Unopen ports are now reported |
|---|
| 219 | 2008-04-14 templates/htm* |
|---|
| 220 | - Fixes for bug 24: HTML output is now valid HTML 4.01 Strict |
|---|
| 221 | 2008-04-11 nikto.pl |
|---|
| 222 | - Started using international dates instead of the weird US format |
|---|
| 223 | - Added a fix for bug id 23: allow a range of ports instead of a comma separated list |
|---|
| 224 | 2008-04-11 db_outdated |
|---|
| 225 | - Updated current version of Apache to 2.2.8 |
|---|
| 226 | 01.06.2008 2.02 |
|---|
| 227 | - Added XML output thanks to the work of Jabra. XML format comes from templates (same as HTML). See the 'templates' dir for more info. |
|---|
| 228 | - HTML reports changed by Jabra to remove some oddities and remove HTML from items |
|---|
| 229 | - Fixed non-reporting of non-HTTP ports (or closed ports) when at least one port was HTTP. |
|---|
| 230 | - Removed experimental knowledge base (KB) code, as XML output is more flexible for long-term scan tracking |
|---|
| 231 | - Added unique identifiers to all tests from databases, and all tests created in code |
|---|
| 232 | - Updated documentation |
|---|
| 233 | 01.02.2008 nikto_core |
|---|
| 234 | - Fixed improper parsing of long options (-update, etc.). Thanks to Frank Breedijk for figuring this out. |
|---|
| 235 | 12.30.2007 db_servers |
|---|
| 236 | - Removed as it is not used |
|---|
| 237 | 12.19.2007 nikto_msgs.plugin |
|---|
| 238 | - Add a boundary for regex on versions to cut down false positives |
|---|
| 239 | 12.19.2007 niko_favicon.plugin |
|---|
| 240 | - Added OSVDB ID |
|---|
| 241 | 12.18.2007 niko_favicon.plugin |
|---|
| 242 | - Fix false positive when favicon.ico doesn't exist |
|---|
| 243 | 11.22.2007 Nikto 2.01 release |
|---|
| 244 | - Fix anti ids encoding use. thanks to Francisco Amato |
|---|
| 245 | - Fix virtual host usage if set via CLI. thanks Jon Hart |
|---|
| 246 | - Fix Host header restoration when testing for IIS IP leak |
|---|
| 247 | - Fix for plugindir & templatedir if EXECDIR is set in config.txt, thanks Shiraishi.M and Will Andrews for pointing it out. |
|---|
| 248 | - Fix count of items--count now accurately reflects the number of items, not just number of vulns. thanks Frank Breedijk |
|---|
| 249 | - Kick a few more things to KB that should be saved |
|---|
| 250 | - Added SKIPIDS to config.txt to completely ignore some tests loaded from db_tests. Suggested by Christian Folini. |
|---|
| 251 | - Enhanced rm_active_content to try to exclude the file/QUERYSTRING requested |
|---|
| 252 | - Unset the auth header after guessing at it. Thanks Paul Woroshow for reporting the bug. |
|---|
| 253 | 11.12.2007 nikto_headers.plugin |
|---|
| 254 | - Fix internal IP address snarfing for IIS, thanks Frank Breedijk for pointing it out |
|---|
| 255 | 11.10.2007 Nikto 2.00 release |
|---|
| 256 | - Rewrite of nikto_httpoptions.plugin to read the Public header |
|---|
| 257 | - Fixups to prevent namespace violations in nikto.pl and nikto_core.plugin |
|---|
| 258 | - Add some normalizations to the -root option variable, suggested by Erik Cabetas |
|---|
| 259 | - Added -Display with options for suppressing redirects & cookies from being included in output |
|---|
| 260 | - Added -Tuning options to let users specify what they would like to test, or exclude certain categories |
|---|
| 261 | - Added config.txt's NMAPOPTS, thanks Sean Lewis for the suggestion |
|---|
| 262 | - All new HTML report |
|---|
| 263 | - Bugfix: a found cookie would report for every port/server after it was found |
|---|
| 264 | - Bugfix: all hosts scanned with all ports if hosts file used |
|---|
| 265 | - Bugfix: all hosts scanned with port 80 despite what the user wanted |
|---|
| 266 | - Bugfix: Reverse DNS inet_aton error fix, pointed out by Jason Peel @ Foundstone |
|---|
| 267 | - Changed auth checking so it will test any directory found, not just /, and removed nikto_realms.plugin as a consequence |
|---|
| 268 | - Changed scan_database.db format significantly (and name), (and all the code to deal with tests) |
|---|
| 269 | - Completely new 404 engine which causes less false-positives (see docs) |
|---|
| 270 | - Created dump_lw_hash instead of dump_request_hash & dump_result_hash |
|---|
| 271 | - Implemented a knowledge base which (should) store all the gory details of scans... probably use this later ;) |
|---|
| 272 | - Moved pre-defined variables from config.txt to variables.db so they can be automagically updated. Entries in config.txt are still read. |
|---|
| 273 | - Removed %CFG, storing vars in %NIKTO instead |
|---|
| 274 | - Removed -generic |
|---|
| 275 | - Removed extraneous global vars |
|---|
| 276 | - Removed load_realms, combined with load_variables |
|---|
| 277 | - Replaced %CONFIG with %NIKTOCONFIG |
|---|
| 278 | - Set MAX_WARN to trigger on any response code, skipping 404|403|401|400 to avoid common ones |
|---|
| 279 | - Added -Single single request mode |
|---|
| 280 | - Updates to use the RFP's LibWhisker 2.0 |
|---|
| 281 | - Added -Help to show extended help ouput, changed default help screen to be shorter. Suggested by Jericho. |
|---|
| 282 | - Additional error checking on invalid reverse-dns (Paul Woroshow) |
|---|
| 283 | - Cleaned up comment/line parsing routines in multiple places, from Erik Cabetas |
|---|
| 284 | - Tightened some for loops with real values instead of guessing, from Erik Cabetas |
|---|
| 285 | - Addded error message if no host is specified, from Erik Cabetas |
|---|
| 286 | - Added more robust output file type checking (txt/htm/cvs), from Erik Cabetas |
|---|
| 287 | - Added more debug statements regarding which CGI directories will be scanned, from Erik Cabatas |
|---|
| 288 | - Bugfix: more 'half dead host' scanning issues resolved with Jericho. LW is much pickier now about calling http_close |
|---|
| 289 | - Added error if -F specified without -o, from Erik Cabetas |
|---|
| 290 | - Bugfix: server category match no longer matches partial strings, from Erik Cabetas |
|---|
| 291 | - Bugfix: mis-pasted line, pointed to by Erik Cabetas |
|---|
| 292 | - Send all errors to STDERR |
|---|
| 293 | - Added -config option to specify a config file, thanks to Pavel Kankovsky |
|---|
| 294 | - fixed regex issue on banner. thanks Alexander Ehlert for pointing it out |
|---|
| 295 | - All other plugins updated for v2 changes |
|---|
| 296 | - Added favicon.ico hash checking |
|---|
| 297 | - ... gobs more |
|---|
| 298 | 02.06.2004 nikto_core.plugin 1.21 |
|---|
| 299 | - Cleaned up comment/line parsing routines in multiple places, from Erik Cabetas |
|---|
| 300 | - Tightened some for loops with real values instead of guessing, from from Erik Cabetas |
|---|
| 301 | - Removed duplicate bit of code, from Erik Cabetas |
|---|
| 302 | - Addded error message if no host is specified, from Erik Cabetas |
|---|
| 303 | - Added more robust output file type checking (txt/htm/cvs), from Erik Cabetas |
|---|
| 304 | - Added more debug statements regarding which CGI directories will be scanned, from Erik Cabatas |
|---|
| 305 | 12.17.2003 |
|---|
| 306 | nikto_core.plugin 1.20 |
|---|
| 307 | - Fixed BID links, thanks Richard Tortorella for the report. |
|---|
| 308 | 10.27.2003 Nikto 1.32 release |
|---|
| 309 | nikto_core.plugin 1.19 |
|---|
| 310 | - Removed unecessary 'use IO::Socket' call from resolve() |
|---|
| 311 | - Removed unecessary counters |
|---|
| 312 | - Replaced some slow foreach counters |
|---|
| 313 | - Moved proxy_check earlier, before port_scan, so it will be set first |
|---|
| 314 | - Removed -allcgi option in favor of -CGIdir, which can specify to test 'all', 'none' or a specific directory. |
|---|
| 315 | - Bugfix: testing through proxy by making sure host name is set instead of ip, thanks to Fabrice Annic for the catch |
|---|
| 316 | - Bugfix: a regex/logic/if error in test_target, thanks Pavel Kankovsky for the bug report. 401/302 messages will now report regardless of test/pass fail. |
|---|
| 317 | - Bugfix: -dbcheck now identifies duplicates without relying on message text, thanks Jericho / Attrition.org for pointing this out |
|---|
| 318 | nikto.pl 1.12 |
|---|
| 319 | - Rearranged order of get_banner & setup so that it would be called right |
|---|
| 320 | nikto_headers.plugin 1.08 |
|---|
| 321 | - Added DAAP header check |
|---|
| 322 | 10.02.2003 |
|---|
| 323 | nikto_core.plugin 1.18 |
|---|
| 324 | - Fixed get_banner to properly handle multi host/port scans |
|---|
| 325 | 10.01.2003 |
|---|
| 326 | nikto_outdated.plugin 1.12 |
|---|
| 327 | - Fixed improper matching in version evals, reported by Paul Bakker |
|---|
| 328 | |
|---|
| 329 | 09.30.2003 |
|---|
| 330 | nikto_core.plugin 1.17 |
|---|
| 331 | - Reordered loop code to make -f scans faster. |
|---|
| 332 | - Added a skip for "(Win32)" in the version updates back to cirt.net |
|---|
| 333 | nikto_outdated.plugin 1.11 |
|---|
| 334 | - Stripping () from version strings |
|---|
| 335 | 09.24.2003 Nikto 1.31 release |
|---|
| 336 | nikto_core.plugin 1.16 |
|---|
| 337 | - Fixed a bug in resolve() that may prevent name lookups when host files used |
|---|
| 338 | - Fixed a bug in resolve() where scan would exit if 1 name resolution from host file failed |
|---|
| 339 | - Changed set_targets so that if the -h value exists as a file it reads that instead of resolving it as a name. This eliminates need for .csv or .txt file name endings. |
|---|
| 340 | - Added auto or semi-auto update of version strings to CIRT.net. This is done through a simple GET request. Controlled via config.txt's UPDATES variable. |
|---|
| 341 | *ABSOLUTELY NO* server info is sent... only versions from HTTP headers, i.e. "Apache/4.0". Thanks to Jericho for feedback/ideas. |
|---|
| 342 | - Added a host counter output at end & for every 10 hosts |
|---|
| 343 | - Set CHANGES.txt download only on *code* updates, not DBs |
|---|
| 344 | - Added MAX_WARN to config.txt for warning level on OK/Moved messages, thanks Jericho for the suggestion. |
|---|
| 345 | - Added PROMPTS to config.txt to allow user control of prompting--good for unattended scans |
|---|
| 346 | - Added a regex test to dbcheck() better catch errors in server_msgs.db |
|---|
| 347 | - Thanks again to Jericho for many updated tests/information. |
|---|
| 348 | - Cleaned up port scan code |
|---|
| 349 | - Fixed/improved scanning through proxies |
|---|
| 350 | nikto_outdated.plugin 1.09 |
|---|
| 351 | - Added support for sending updates of version strings to CIRT.net. See nikto_core.plugin version 1.15 notes. |
|---|
| 352 | LW.pm - 1.8 |
|---|
| 353 | - Updated to LW.pm v1.8, see the change log included with it (www.wiretrip.net/rfp/). |
|---|
| 354 | nikto.pl - 1.10 |
|---|
| 355 | - Implemented versioning on nikto.pl (!), many changes to support core 1.15 |
|---|
| 356 | - Put 'require LW.pm' down *after* we know where it is.. duh. Thanks J Barber (ussysadmin.com) for the suggestion. Also changed it 'require' vs 'use' so in the future I can update it, if necessary. |
|---|
| 357 | - Hosts are now tested in the same order as the appear in an input file |
|---|
| 358 | 08.18.2003 |
|---|
| 359 | nikto_outdated.plugin 1.08 |
|---|
| 360 | - Fixed nasty regex bug in the version eval, and made more efficient. Pointed out by fr0stman, thx Zeno for assistance |
|---|
| 361 | 07.22.2003 |
|---|
| 362 | nikto_headers.plugin 1.07 |
|---|
| 363 | - Added Host header back after delete in IIS Content-Location check. Thanks to Abdi Ponce for the bug report & debug. |
|---|
| 364 | nikto_httpoptions.plugin 1.04 |
|---|
| 365 | - Changed PROPPATCH, TRACK, TRACE messages. Changed PROPFIND message, thanks to Jericho for tracking down some good info on it. Added SEARCH message. |
|---|
| 366 | nikto_core.plugin 1.14 |
|---|
| 367 | - Added <title> tags to the HTML output for browser-neatness |
|---|
| 368 | - Removed a stray debug print |
|---|
| 369 | 07.03.2003 |
|---|
| 370 | - Thanks to Jeremy Bae for many Jeus Webserver tests. |
|---|
| 371 | 06.29.2003 |
|---|
| 372 | nikto_core.plugin 1.13 |
|---|
| 373 | - changed some &function calls to function() to keep $_ from being passed down another level.. thanks to zeno for the heads-up. |
|---|
| 374 | nikto_headers.plugin 1.05 |
|---|
| 375 | - fixed the IIS4 content-location check as it had a tendency to fail miserably... |
|---|
| 376 | 06.29.2003 |
|---|
| 377 | nikto_core.plugin 1.12 |
|---|
| 378 | - changed output of dump_request to be more like normal request text |
|---|
| 379 | 06.29.2003 |
|---|
| 380 | nikto_core.plugin 1.11 |
|---|
| 381 | - bug fix for scanning through proxies |
|---|
| 382 | 06.19.2003 |
|---|
| 383 | nikto_core.plugin 1.10 |
|---|
| 384 | - added 'csv' to file formats in -help output (doh!) |
|---|
| 385 | - minor speedups |
|---|
| 386 | 06.17.2003 |
|---|
| 387 | nikto_user_enum_apache.plugin 1.02 |
|---|
| 388 | - Bugfix: some user names not tested (zz, zzz, etc.) |
|---|
| 389 | - Major rewrite for speed improvements |
|---|
| 390 | nikto_user_enum_cgiwrap.plugin 1.01 |
|---|
| 391 | - Bugfix: some user names not tested (zz, zzz, etc.) |
|---|
| 392 | - Major rewrite for speed improvements |
|---|
| 393 | 06.16.2003 |
|---|
| 394 | nikto_core.plugin 1.09 |
|---|
| 395 | - dbcheck option enhanced: check that all plugins are in the order file |
|---|
| 396 | - dbcheck option enhanced: check that all plugins have properly named sub calls |
|---|
| 397 | - update option enhanced: retrieves updated CHANGES.txt file with code updates |
|---|
| 398 | - Bugfix: resolve() did not properly catch invalid IP addresses. Reported by Rick Tortorella. |
|---|
| 399 | 06.12.2003 |
|---|
| 400 | nikto_core.plugin 1.08 |
|---|
| 401 | - Removed iprint() entirely (finally) |
|---|
| 402 | - Made "Needs Auth" links active in HTML output |
|---|
| 403 | 05.30.2003 |
|---|
| 404 | nikto_core.plugin 1.07 |
|---|
| 405 | - Bugfix: |
|---|
| 406 | 05.30.2003 |
|---|
| 407 | nikto_core.plugin 1.06 |
|---|
| 408 | - Added number of elapsed seconds to final host/port output |
|---|
| 409 | - Bugfix: Changed CAN/CVE link to point to cve.mitre.org instead of ICAT |
|---|
| 410 | - Bugfix: Duplicate port 80 in nmap options if -p not specified but 80 specified in hosts file |
|---|
| 411 | 05.28.2003 |
|---|
| 412 | nikto_core.plugin 1.05 |
|---|
| 413 | - Bugfix: -update code prevented automatic updates. Found & fixed by Keith Young. Also reported by Paul Worshaw. |
|---|
| 414 | 05.27.2003 |
|---|
| 415 | Nikto 1.30 release |
|---|
| 416 | General changes |
|---|
| 417 | - removed nikto_google.plugin entirely (may add better plugin later) |
|---|
| 418 | - major "under the hood" changes to make things easier to maintain, read & modify |
|---|
| 419 | - killed as many global vars as I could stand in favor of a few global hashes (CLI input, etc.) |
|---|
| 420 | - added $CURRENT_HOST_ID and $CURRENT_PORT as globals--these are the pointers to "where you are" (mostly as in $TARGETS) |
|---|
| 421 | - added the ability to have basic conditional items for tests, i.e. "200!index" to designate a response of "200" but the |
|---|
| 422 | content does not contain "index" (suggested by Paul Woroshow). |
|---|
| 423 | - added -V option, which displays versions of all code files & databases (suggested by Jericho) |
|---|
| 424 | - specifying -ssl now forces *all ports* on *all servers* to use ssl. best that can be done for now. |
|---|
| 425 | - added multi-host support via a text file with port specification in the file or via CLI |
|---|
| 426 | - all new save file routines |
|---|
| 427 | - unbuffered file output to keep partial/cancelled run data |
|---|
| 428 | - removed the -w option in favor of -F with multiple formats |
|---|
| 429 | - added support for NTLM authentication |
|---|
| 430 | - added cgiwrap plugin |
|---|
| 431 | nikto_core.plugin 1.05 |
|---|
| 432 | - Many updates to support multiple host scans |
|---|
| 433 | - Added UA for update agents |
|---|
| 434 | - Changed all %SERVER hash refs to either %CLI or %TARGETS |
|---|
| 435 | - Removed %BANNERS (now in %TARGETS) |
|---|
| 436 | - Added set_targets() to handle various target input methods |
|---|
| 437 | - Bugfix: non-SSL ports not found after first SSL port found on a host |
|---|
| 438 | - Bugfix: authentication realms were not checked with the proper root if -r was specified on the CLI |
|---|
| 439 | - Bugfix: can't call 'fprint' if core plugin is not found (duh!). Found by Erwin Paternotte. |
|---|
| 440 | nikto_user_enum_cgiwrap.plugin 1.00 |
|---|
| 441 | - added |
|---|
| 442 | nikto_mutate.plugin 1.05 |
|---|
| 443 | - change for using %CLI |
|---|
| 444 | nikto_passfiles.plugin 1.01 |
|---|
| 445 | - change for using %CLI |
|---|
| 446 | nikto_user_enum_apache.plugin 1.01 |
|---|
| 447 | - change for using %CLI |
|---|
| 448 | - renamed from 'nikto_userenum.plugin' |
|---|
| 449 | nikto_msgs.plugin 1.03 |
|---|
| 450 | - minor changes for multi-host support |
|---|
| 451 | plugins_order.txt 1.03 |
|---|
| 452 | - removed nikto_google.plugin |
|---|
| 453 | 02.23.2003 |
|---|
| 454 | nikto_core.plugin 1.04 |
|---|
| 455 | - Added a work around for servers that answer with blank www-authenticate headers with invalid id/pass combos |
|---|
| 456 | nikto_realms.plugin 1.00 |
|---|
| 457 | - Added to distro |
|---|
| 458 | realms.db 1.00 |
|---|
| 459 | - Added to distro |
|---|
| 460 | plugins_order.txt 1.02 |
|---|
| 461 | - Added nikto_realms.plugin |
|---|
| 462 | 01.22.2003 |
|---|
| 463 | nikto_httpoptions.plugin 1.03 |
|---|
| 464 | - standardized wording, added TRACE option, added more description to WebDAV msgs (thanks Jericho at attrition.org). |
|---|
| 465 | 01.22.2003 |
|---|
| 466 | nikto_core.plugin 1.03 |
|---|
| 467 | - fixed a bug with matching proper server categories, thanks to Paul Woroshow. |
|---|
| 468 | 01.17.2003 |
|---|
| 469 | nikto_core.plugin 1.02 |
|---|
| 470 | - fixed the GetOptions only looking for "-gener" instead of "-generic", thanks to Michel Arboi |
|---|
| 471 | 01.02.2003 |
|---|
| 472 | nikto_core.plugin 1.01 |
|---|
| 473 | - fixed proxy authentication not prompting for -update option |
|---|
| 474 | 01.01.2003 |
|---|
| 475 | Nikto 1.23 |
|---|
| 476 | - added nikto_plugin_order.txt to force plugin order to something we want rather than alpha |
|---|
| 477 | - added nikto_core.plugin & removed most functions from nikto.pl |
|---|
| 478 | - added -cookies option |
|---|
| 479 | - enhanced db syntax error checking (spurred by syntax problems Thomas Reinke found) |
|---|
| 480 | - started using the LW 1.6 libraries |
|---|
| 481 | - fixed infinite loop output problem (no longer wrapping long lines) |
|---|
| 482 | - removed usage from saved output (too long) |
|---|
| 483 | - remove nikto_frontpage.plugin and put checks in scan_database.db |
|---|
| 484 | - moved server categories from scan_database.db to servers.db |
|---|
| 485 | - got rid of the leading "c," requirement from scan_database.db |
|---|
| 486 | - added STATIC-COOKIE config item as suggested by Eyal Udassin |
|---|
| 487 | - made CLI options case sensitive (to support more options, hosts files, etc) |
|---|
| 488 | - added Javier Fernandez-Sanguino Pen~a's Apache user enumeration plugin |
|---|
| 489 | - added -r (-root) file prepend as suggested by Eyal Udassin |
|---|
| 490 | - many DB typo fixes from Jay Swofford |
|---|
| 491 | - fixed a regex bug in nikto_robots.plugin and nikto_apacheusers.plugin |
|---|
| 492 | - new update location (path) to better support upgrades that don't effect db syntax |
|---|
| 493 | 08.21.2002 |
|---|
| 494 | Nikto 1.21 |
|---|
| 495 | - Fixed all the proxy code--none of it was working due to where it was set in the initialization. |
|---|
| 496 | - Added -update to the help output. Not sure why it wasn't there. |
|---|
| 497 | 08.12.2002 |
|---|
| 498 | Nikto 1.20 |
|---|
| 499 | - Re-packaged to take out a testing line from LW.pm. Thanks to D Rhoades for the catch |
|---|
| 500 | 08.11.2002 |
|---|
| 501 | Nikto 1.20 |
|---|
| 502 | - Moved all mutate options to plugins |
|---|
| 503 | - Added password file mutate plugin |
|---|
| 504 | - Added better error messages if problems arise |
|---|
| 505 | - Test for false-positives on all CGI directories |
|---|
| 506 | - Added -useproxy CLI |
|---|
| 507 | - Printing SSL certs the server accepts |
|---|
| 508 | - Fixed port sorting if -f is used |
|---|
| 509 | - Forked 1.20DCX edition for DefCon 10 CD: difference is only output |
|---|
| 510 | - Fixed a bug where "findonly" was referenced as "findports" (thanks J DePriest) |
|---|
| 511 | - Added properly wrapped text output in saved files |
|---|
| 512 | 05.25.2002 |
|---|
| 513 | Nikto 1.100 |
|---|
| 514 | - stopped nikto from dying if no config.txt file found |
|---|
| 515 | - added Apache user enumeration plugin |
|---|
| 516 | - added robots.txt plugin |
|---|
| 517 | - set false-positive message to display at end of run as well as during |
|---|
| 518 | 04.23.2002 |
|---|
| 519 | Nikto 1.10BETA_3 |
|---|
| 520 | - fixed CAN/CVE links, added BID/CA/MS links (suggested by Jericho). |
|---|
| 521 | - prints total number of 'issues' found (suggested by Jericho). |
|---|
| 522 | - fixed proxy usage in the cirt.net update function. |
|---|
| 523 | - updated to use LW 1.4, which fixes an SSL infinite loop problem. |
|---|
| 524 | - fixed 401 auth suppression (broken in beta 2). |
|---|
| 525 | - added robots plugin to examine robots.txt & add items found to the mutate check |
|---|
| 526 | 03.31.2002 |
|---|
| 527 | Nikto 1.10BETA_2 |
|---|
| 528 | - fixed the config.txt DEFAULTHTTPVER variable setting so it really works |
|---|
| 529 | - made proxy_check run only once per session |
|---|
| 530 | - removed all reference to "nikto" in the scan_database.db |
|---|
| 531 | 03.23.2002 |
|---|
| 532 | Nikto 1.10BETA_1 |
|---|
| 533 | - renamed plugins from .pl to .plugin, just for clarity. but they're still perl files |
|---|
| 534 | - allowed nikto.pl to update plugins the same as .db files |
|---|
| 535 | - usage of LW 1.2 |
|---|
| 536 | - countless "under the hood" type things |
|---|
| 537 | - lowercase-incoming-headers to more easily handle case sensitive nonsense |
|---|
| 538 | - compartmentalized a LOT more code to make things easier to read |
|---|
| 539 | - created config.txt file configuration w/o midifying nikto.pl itself |
|---|
| 540 | - added user_scan_database.db so that it won't get ovwr-written if the user adds checks |
|---|
| 541 | - enabled RFP's LibWhisker anti-ids options |
|---|
| 542 | - change "check," to "c," in scan_database, just to save a little bandwidth on cirt.net :) |
|---|
| 543 | - added plugin to check HTTP methods |
|---|
| 544 | - created a 'mutate' mode for really brute force finding stuff on servers |
|---|
| 545 | - added the ability to set default CLI options via config file |
|---|
| 546 | - added PLUGINDIR config variable |
|---|
| 547 | - added plugin to check other HTTP headers (just x-powered-by for now) |
|---|
| 548 | - added ability for nikto to auto-determine ssl v non-ssl on a port |
|---|
| 549 | - added port scanning ability (with or without nmap) |
|---|
| 550 | - added ability to send message via the update script's versions.txt file. I don't know why, but it may be handy to let folks know if a new beta is out, or something. |
|---|
| 551 | - implemented the virtual host headers as patched by Pasi Eronen |
|---|
| 552 | 01.17.2002 |
|---|
| 553 | Nikto 1.018 |
|---|
| 554 | - Added /mpcgi/ to the @CGIDIRS array based on some suggestions. |
|---|
| 555 | - Fixed a bug in the auth_check function (thanks RFP), and cleaned up error reporting on failed auths |
|---|
| 556 | 01.12.2002 |
|---|
| 557 | Nikto 1.017 |
|---|
| 558 | - Fixed a bug where the data portion of a request did not reset to null after some checks (thanks to Phil Brass for pointing me at it & letting me test against his server). |
|---|
| 559 | 01.10.2002 |
|---|
| 560 | Nikto 1.016 |
|---|
| 561 | - Add dump_*hash functions |
|---|
| 562 | - Added pause (-x) in scan loop |
|---|
| 563 | - Fixed a bug which caused a major slowdown |
|---|
| 564 | - Added load_conf for setup for configuration files (future) |
|---|
| 565 | - Fixed http vs. https links in output files |
|---|
| 566 | 01.08.2002 |
|---|
| 567 | Nikto 1.015 |
|---|
| 568 | - Fixed a bug (?) in Libwhisker PR4 (will check v1 code...) |
|---|
| 569 | - Corrected an error which caused a few false-positives (404 really IS not found :) |
|---|
| 570 | 01.07.2002 |
|---|
| 571 | Nikto 1.014 |
|---|
| 572 | - Removed comment filtering from lines in scan_database.db to accommodate SSI includes |
|---|
| 573 | - Fixed quoting removal for data portions in checks (so " is valid). |
|---|
| 574 | 01.06.2002 |
|---|
| 575 | Nikto 1.013 |
|---|
| 576 | - Made major globabl variable changes, moved tons of them to hashes |
|---|
| 577 | - Wrote some basic plugin writing documentation & added 'docs' directory |
|---|
| 578 | 01.03.2002 |
|---|
| 579 | Nikto 1.012 |
|---|
| 580 | - Added extended output for scan archival reasons (suggested by Steve Saady) |
|---|
| 581 | - Changed host auth failure to a warning, not stoppage |
|---|
| 582 | - Added "data" portion to scan_database.db |
|---|
| 583 | - Added @IP and @HOSTNAME substitutions for scan_database.db checks (will be replaced by actual IP/hostname) |
|---|
| 584 | - in case they are needed in the future. |
|---|
| 585 | - Added JUNK() to scan_database.db checks to facilitate future buffer-overflows (non-DoS), and future DoS plugins |
|---|
| 586 | - Added Proxy-agent as valid the same as Server result strings |
|---|
| 587 | - Changed -l to -n ("nolookup") to be more accurate |
|---|
| 588 | 01.02.2002 |
|---|
| 589 | Nikto 1.011 |
|---|
| 590 | - Added proxy auth for db update requests (oops). |
|---|
| 591 | - Started .xxx version numbering scheme to make life easier |
|---|
| 592 | - Fixed href tags in HTM output (< and > encoding and target host/ip) |
|---|
| 593 | - Added "caseless" WWW-Authenticate finding (for iPlanet Proxy) |
|---|
| 594 | 12.31.2001 |
|---|
| 595 | Nikto 1.01 |
|---|
| 596 | - Added regex to remove comments from scan_database.db in case they ever exist |
|---|
| 597 | - Fixed extra 'Host:' line being sent to server (duh). |
|---|
| 598 | - Fixed non 'GET' request data posting (duh). |
|---|
| 599 | - Added -timeout option |
|---|
| 600 | 12.27.2001 |
|---|
| 601 | Nikto 1.00 |
|---|
| 602 | - Finalized beta version for release |
|---|
