1. download perl
command :sudo apt-get install perl
2. download nikto
link: https://cirt.net/nikto/nikto-2.1.4.tar.gz
decompress: tar -zxvf nikto-2.1.4.tar.gz
3. go to the relevant dir
basic command:
perl nikto.pl -H (see help)
perl nikto.pl -host 172.16.4.21 -p 8080
this tool is found today, in order to check if the http-method trace is turned off or not on glassfish2.1.1, it is very wired that you cannot control trace method by admin console, but in glassfish3.1 it has, I think maybe this in a bug already repaired by glassfish team.
so in glassfish2, likely can do like this:
1. write <property name="traceEnabled" value="false"/> between <http-service> </http-service> in domain.xml under
glassfish/2.1.1/domains/
2. using nikto tool to test if the trace method works or not, the command is:
perl nikto.pl -host 172.16.4.21:8080
command :sudo apt-get install perl
2. download nikto
link: https://cirt.net/nikto/nikto-2.1.4.tar.gz
decompress: tar -zxvf nikto-2.1.4.tar.gz
3. go to the relevant dir
basic command:
perl nikto.pl -H (see help)
perl nikto.pl -host 172.16.4.21 -p 8080
this tool is found today, in order to check if the http-method trace is turned off or not on glassfish2.1.1, it is very wired that you cannot control trace method by admin console, but in glassfish3.1 it has, I think maybe this in a bug already repaired by glassfish team.
so in glassfish2, likely can do like this:
1. write <property name="traceEnabled" value="false"/> between <http-service> </http-service> in domain.xml under
glassfish/2.1.1/domains/
2. using nikto tool to test if the trace method works or not, the command is:
perl nikto.pl -host 172.16.4.21:8080
扫一扫
6374
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
