CIRT.net

I've decided to stop procrastinating and put the final polish on the next version of Nikto and aim for a mid-July release date.

We've had a couple of bugs raised after some people have upgraded Nikto 2.02 to Nikto 2.03 and kept the same configuration file.

The more observant may have noticed that several spamming tickets were created within the Nikto development trac instance, this compounded with a time when I couldn't get to my mail account, means that we've had around 100 spams in the trac database.

Just a quick note that I've decided this whole "blog" thing isn't just a fad, so I've started writing over at the work blog since, well, they pay me. So go subscribe.

There was a small mistake in the release of Nikto 2.03; whilst fixing one bug, I'd introduced a more serious one: SSL scanning didn't work.

Michel Arboi and Brian Martin have written a long post on Tenable's blog detailing exactly how to get Nessus to run Nikto automatically. This has been a question that's come up time and again on the mailing lists, so hopefully this will help everyone out.