{"id":19551874,"url":"https://github.com/seism0saurus/nikto-inspec","last_synced_at":"2025-10-08T15:09:00.154Z","repository":{"id":51364038,"uuid":"206983408","full_name":"seism0saurus/nikto-inspec","owner":"seism0saurus","description":"This is a custom inspec inspec from Ulrich Viefhaus. This is neither an official product of inspec nor nikto.  The profile test an http/https server with the open source web server scanner nikto2. Nikto checks for known insecure files on the webserver, outdated software versions and insecure configuration items.  You can customoze the profile with attribute files and set hosts, ports and commandline options.","archived":false,"fork":false,"pushed_at":"2021-05-13T12:27:06.000Z","size":15,"stargazers_count":1,"open_issues_count":0,"forks_count":4,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-26T20:34:00.899Z","etag":null,"topics":["devops","inspec","nikto","security"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/seism0saurus.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-09-07T14:57:52.000Z","updated_at":"2021-05-13T12:27:08.000Z","dependencies_parsed_at":"2022-09-11T01:22:25.834Z","dependency_job_id":null,"html_url":"https://github.com/seism0saurus/nikto-inspec","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/seism0saurus/nikto-inspec","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seism0saurus%2Fnikto-inspec","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seism0saurus%2Fnikto-inspec/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seism0saurus%2Fnikto-inspec/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seism0saurus%2Fnikto-inspec/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/seism0saurus","download_url":"https://codeload.github.com/seism0saurus/nikto-inspec/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seism0saurus%2Fnikto-inspec/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278964286,"owners_count":26076643,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-08T02:00:06.501Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["devops","inspec","nikto","security"],"created_at":"2024-11-11T04:15:43.240Z","updated_at":"2025-10-08T15:09:00.112Z","avatar_url":"https://github.com/seism0saurus.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Nikto inspec profile\n\nThis is a custom inspec [inspec](https://www.inspec.io/) from Ulrich Viefhaus. This is neither an official product of Chef InSpec nor Nikto.\n\nThe profile test an http/https server with the open source web server scanner [nikto2](https://cirt.net/Nikto2). \n\nNikto checks for known insecure files on the webserver, outdated software versions and insecure configuration items.\n\nYou can customoze the profile with attribute files and set hosts, ports and commandline options.\n\n## Preperations\n\n### Inspec\n\nYou need access to the inspec command on your testmachine. If you don't have inspec installed, follow the instructions here: https://www.inspec.io/downloads/\n\n### Access to the Docker Demon\n\nYou need access to the docker deamon on your testmachine. If you don't have docker installed, follow the instructions here: https://docs.docker.com/install/. Please see the Docker documentation on how to \n\n### Download the Nikto Docker image\n\nbefore you can run the nikto profile you have to build the nikto docker image. To build it run\n\n```bash\ngit clone https://github.com/sullo/nikto\ncd nikto\ndocker build -t sullo/nikto .\n```\n\nThis repository is linked on the official nikto homepage. There are a lot of nikto images on the docker hub. \n\nIf you trust one of them and want to use it instead the sullo/nikto image, change it in the example[inputs.example.yml](inputs.example.yml) or create a custom attributes file.\n\n## Running the Profile\n\nYou can define as many hosts and urls as you want. As a best practice, copy and rename the `inputs.example.yml` to `your-updated-inputs.yml` for your environment, organization or system.\n\nAfter you have configured your services go into the folder you have downloaded nikto-spec and run\n\n```bash\ninspec exec . --input-file \u003cyour-updated-inputs.yml\u003e\n```\n\n### Passing Options to Nikto\n\nOptions you can pass to nikto can be found under https://cirt.net/nikto2-docs/options.html\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fseism0saurus%2Fnikto-inspec","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fseism0saurus%2Fnikto-inspec","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fseism0saurus%2Fnikto-inspec/lists"}