Does nikto only give false positives?

I run nikto on web apps when I get stuck, but I only ever get a massive list of false positives. I don’t think I’ve ever found a real vulnerability with it. Is it more useful when used on certain targets, like Apache or something? I know auto scanners …

July 22, 2023
Read More >>