Sign inSign up

biwis/te-nikto-scan

By biwis

•Updated about 3 years ago

nikto scanner, nikto, vulnerability scanner

Image
Networking
Security
0

415

biwis/te-nikto-scan repository overview

⁠te-nikto-scan

te-nikto-scan is a lightweight website vulnerability scanner. With te-nikto-scan you can easily find site vulnerability, identify services and their version, and get a list of relevant OSVDBs affecting your sites. te-nikto-scan is a wrapper around Nikto and a vulnerability script that turns Nikto into a complete network vulnerability scanner. te-nikto-scan makes it easy to deploy Nikto locally in a container. te-nikto-scan now has the ability to run scheduled scans (in cron format)

⁠Nikto default parameter in container

nikto.pl -h /shared/sites.txt $@ -Format <format> -output /shared/reports/nikto_report_<date>.<format>

To change nikto parameters you can use -e arg=" <parametrs>". For example:

docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-flan-scan -v "$PWD/shared:/shared:Z" -e format="html" -e arg="-ssl"  biwis/te-nikto-scan

⁠Getting Started

  1. Pull this image:
docker pull biwis/te-nikto-scan
  1. Run docker container.
  • Example of scanning and result report in html :
docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-nikto-scan -v "$PWD/shared:/shared:Z" -e format="html"  biwis/te-nikto-scan
  1. Run Nikto Custom Option
docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-nikto-scan -v "$PWD/shared:/shared:Z" -e format="html" -e arg="-ssl"  biwis/te-nikto-scan

this is equivalent to running the command in the container

nikto.pl -h /shared/sites.txt -ssl -Format html -output /shared/reports/nikto_report_<date>.html
  1. Example of running a task in a container on a schedule (cron statement)
docker run -d --cap-drop=all --cap-add=NET_RAW --name te-nikto-scan -v "$PWD/shared:/shared:Z" -v "/etc/localtime:/etc/localtime:ro" -v "/etc/timezone:/etc/timezone:ro" -e format="html" -e arg="-ssl" -e cron_time="00 5 * * 1"  biwis/te-nikto-scan
  • Example docker compose file
version: "3.9"
services:
  te-nikto-scan:
    image: "biwis/te-nikto-scan:latest"
    volumes:
      - "./shared:/shared:Z"
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    environment:
      cron_time: "00 5 * * 1"
      arg: "-ssl"
      format: "html"
    cap_drop:
      - all
    cap_add:
      - NET_RAW
    restart: on-failure

⁠Default value

These values are in run.sh and sheduler.py of this image

format="html" # file extension for the report
cron_time="" # crond scheduling scanning
command="/run.sh" #run command in this container
arg="" #argument for the command in this container

Tag summary

Content type

Image

Digest

sha256:a547e065e…

Size

31 MB

Last updated

about 3 years ago

docker pull biwis/te-nikto-scan