full-disclosure - Re: Nikto 2.1.0 released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 19 Oct 2009 08:44:30 +0200
From: Saladino Patrick <patrick.saladino@...l.ch>
To: david lodge <resident.deity@...il.com>, pentest list
	<pen-test@...urityfocus.com>, "full-disclosure@...ts.grok.org.uk"
	<full-disclosure@...ts.grok.org.uk>
Subject: Re: Nikto 2.1.0 released

Excellent ! Thanks for the information !

-----Message d'origine-----
De : full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-bounces@...ts.grok.org.uk] De la part de david lodge
Envoyé : dimanche 18 octobre 2009 11:52
À : pentest list; full-disclosure@...ts.grok.org.uk
Objet : [Full-disclosure] Nikto 2.1.0 released

It's final time to stop procrastinating: Nikto 2.1.0 is here!
(Available from http://cirt.net/nikto2)

This version has gone through significant rewrites under the hood to
how Nikto works, to make it more expandable and usable.
Changes include:

* Rewrite to the plugin engine allowing more control of the plugin
structure and making it easier to add plugins
* Rewrite to the reporting engine allowing reporting plugins to cover
more and also ensuring that output is written if Nikto is quit before
finishing
* Large overhaul of documentation to document built-in methods and
variables (available in the tarball or on cirt.net
* Addition of caching to reduce amount of calls made to the web
servers, as well as a facility to disable smart 404 guessing.
* Addition of simple guessing for whether a system is an embedded
device and to report what it is
* Plugin to use OWASPs dictionary lists to attempt to brute force
directories on the remote web server (as mutate 6)
* Plugin to attempt to brute force domains (as mutate 5)
* Allow username guessing (mutate 3 and 4) to use a dictionary file as
well as brute forcing
* Support for NTLM authentication
* Lots of bug fixes and new security checks

Please, try out, break and report bugs and suggestions...

Thanks

dave

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/