From: larsno@gmail.com
Date: Thu Nov 09 2006 - 04:17:29 EST
I've been trying to use Nikto on some https servers, and I can't get it to work. All the necessary packets are installed. The strange thing is that it seems to be LW who can't get the response it wants. I get all the SSL certs and even the information in the response seems correct when i try nikto in debug mode. Has enyone else experienced these problems?
Here's the output from nikto -debug:
nikto.pl -debug -h xxxxxx -p 443
---------------------------------------------------------------------------
- Nikto 1.35/1.36 - www.cirt.net
D: - Target id:1:ident:xxxxxxxx:ports_in:443:
D: - Request Hash:
D: - Connection: Keep-Alive
D: - Host: xxxxxx
D: - User-Agent: Mozilla/4.75 (Nikto/1.35 )
D: - $whisker->INITIAL_MAGIC: 31337
D: - $whisker->anti_ids:
D: - $whisker->force_bodysnatch: 0
D: - $whisker->force_close: 0
D: - $whisker->force_open: 0
D: - $whisker->force_open: 0
D: - $whisker->host: xxxxxx
D: - $whisker->http_req_trailer:
D: - $whisker->http_ver: 1.1
D: - $whisker->ignore_duplicate_headers: 1
D: - $whisker->include_host_in_uri: 0
D: - $whisker->lowercase_incoming_headers: 1
D: - $whisker->method: HEAD
D: - $whisker->method_postfix:
D: - $whisker->normalize_incoming_headers: 1
D: - $whisker->port: 443
D: - $whisker->req_spacer:
D: - $whisker->req_spacer2:
D: - $whisker->retry: 1
D: - $whisker->ssl: 0
D: - $whisker->timeout: 10
D: - $whisker->trailing_slurp: 0
D: - $whisker->uri: /
D: - $whisker->uri_param_sep: ?
D: - $whisker->uri_postfix:
D: - $whisker->uri_prefix:
D: - Result Hash:
D: - $whisker->INITIAL_MAGIC 31338
D: - $whisker->error Server read timed out
D: - $whisker->retry_errors ARRAY(0x1e815b4)
D: - $whisker->uri /
D: - Request Hash:
D: - Connection: Keep-Alive
D: - Host: xxxxxxx
D: - User-Agent: Mozilla/4.75 (Nikto/1.35 )
D: - $whisker->INITIAL_MAGIC: 31337
D: - $whisker->anti_ids:
D: - $whisker->force_bodysnatch: 0
D: - $whisker->force_close: 0
D: - $whisker->force_open: 0
D: - $whisker->host: xxxxxxxx
D: - $whisker->http_req_trailer:
D: - $whisker->http_ver: 1.1
D: - $whisker->ignore_duplicate_headers: 1
D: - $whisker->include_host_in_uri: 0
D: - $whisker->lowercase_incoming_headers: 1
D: - $whisker->method: HEAD
D: - $whisker->method_postfix:
D: - $whisker->normalize_incoming_headers: 1
D: - $whisker->port: 443
D: - $whisker->req_spacer:
D: - $whisker->req_spacer2:
D: - $whisker->retry: 1
D: - $whisker->save_ssl_info: 1
D: - $whisker->ssl: 1
D: - $whisker->timeout: 10
D: - $whisker->trailing_slurp: 0
D: - $whisker->uri: /
D: - $whisker->uri_param_sep: ?
D: - $whisker->uri_postfix:
D: - $whisker->uri_prefix:
D: - Result Hash:
D: - cache-control no-cache
D: - connection close
D: - content-length 2024
D: - content-type text/html
D: - pragma no-cache
D: - $whisker->INITIAL_MAGIC 31338
D: - $whisker->code 403
D: - $whisker->http_resp 403
D: - $whisker->http_resp_message Forbidden ( The server denied the specif
ied Uniform Resource Locator (URL). Contact the server administrator. )
D: - $whisker->http_ver 1.1
D: - $whisker->lowercase_incoming_headers 1
D: - $whisker->recv_header_order ARRAY(0x1e81614)
D: - $whisker->retry_errors ARRAY(0x1e88c74)
D: - $whisker->ssl_cert_issuer /DC=xx/DC=xxxx/DC=local/CN=xxxx
D: - $whisker->ssl_cert_subject /C=XX/ST=xxxxx/L=xxxx/O=xx/OU=xxx/CN=xxxxxx
D: - $whisker->ssl_cipher RC4-MD5
D: - $whisker->uri /
+ No HTTP(s) ports found on xxxxxxxx / 443
+ 1 host(s) tested
Lars
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:18 EDT