Introduction

Websites are the most unsecured gateways through which an attacker can exploit your company. It

is important to understand website and web application security to protect your organization.

In this exercise, you will use Nikto $($an open$-$source web server and web application scanner$)$ to

perform comprehensive tests against web servers for multiple security threats.

Exercise

Step $1$: Start the Metasploitable and Kali Linux virtual machine

Step $2$: Enter ifconfig in your Metasploitable VM to get the IP address

Step $3$: In your Kali Linux VM terminal window, type sudo su and press Enter to run the

programs as a root user.

Step $4$: Type cd and press Enter to jump to the root directory.

Step $5$: Type nikto $-H$ and press Enter to view various available commands with full help text

Step $6$: In the terminal window, type nikto $-hxh$