Nikto Integration Guide

Integrate Nikto with Vulnetix. Scan web servers for dangerous files, outdated software, misconfigurations, and known CVEs. Export JSON or XML reports for ingestion into Vulnetix.

Install & scan

$ # Docker (recommended)
docker pull ghcr.io/sullo/nikto:latest

# Debian/Ubuntu
sudo apt install nikto

# macOS
brew install nikto
$ # Docker — write JSON report to current directory
docker run --rm   -v "$(pwd):/tmp"   ghcr.io/sullo/nikto:latest   -h https://example.com   -o /tmp/nikto-report.json   -Format json   -nointeractive

Run Nikto in CI

Scan on every push and upload the results to Vulnetix:

- name: Run Nikto scan
  run: |
    docker run --rm -v "$(pwd):/tmp"       ghcr.io/sullo/nikto:latest       -h ${{ secrets.TARGET_URL }}       -maxtime 15m -nointeractive       -o /tmp/nikto-report.json -Format json

- name: Upload to Vulnetix
  run: vulnetix upload --file nikto-report.json

Centralise Nikto results in Vulnetix

Upload Nikto JSON, XML, HTML, CSV output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

Nikto documentation ↗  ·  Source repository ↗

Wire Nikto into your CI/CD pipeline →