Nikto Scan
- 24 installs
- 1.6k repo stars
- Updated July 19, 2026
- wgpsec/aboutsecurity
Helps with ai & agent building tasks during AI-assisted development.
About
nikto-scan is a Claude Code skill for ai & agent building. It helps solo builders move faster with AI-assisted coding.
- nikto-scan
- AI & Agent Building
- AI-coding skill
Nikto Scan by the numbers
- 24 all-time installs (skills.sh)
- +2 installs in the week ending Jul 27, 2026 (Skillselion tracking)
- Ranked #9,912 of 16,546 AI & Agent Building skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/wgpsec/aboutsecurity --skill nikto-scanAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 24 |
|---|---|
| repo stars | ★ 1.6k |
| Last updated | July 19, 2026 |
| Repository | wgpsec/aboutsecurity ↗ |
What it does
Helps with ai & agent building tasks during AI-assisted development.
Files
Nikto Web 服务器漏洞扫描方法论
Nikto 是经典的 Web 服务器漏洞扫描器。核心优势：检查项丰富（7000+ 项）+ 开箱即用（无需配置）+ 覆盖面广（过时软件/危险文件/配置错误/已知漏洞）。
项目地址：https://github.com/sullo/nikto
Phase 1: 基本扫描
# 扫描单个目标
nikto -h http://target.com
# 指定端口
nikto -h target.com -p 8080
# HTTPS 扫描
nikto -h https://target.com
# 多端口扫描
nikto -h target.com -p 80,443,8080,8443Phase 2: 扫描调优
# 指定扫描类型（Tuning）
# 1=文件上传 2=默认文件 3=信息泄露 4=注入 5=远程获取 6=DoS 7=远程shell 8=命令执行 9=SQL注入
nikto -h http://target.com -Tuning 123489
# 只做信息泄露检查
nikto -h http://target.com -Tuning 3
# 排除 DoS 类检查
nikto -h http://target.com -Tuning x6
# 指定插件
nikto -h http://target.com -Plugins apache_expect_xss,ssl
# 设置最大扫描时间
nikto -h http://target.com -maxtime 300Phase 3: 认证和代理
# Basic Auth
nikto -h http://target.com -id admin:password
# Cookie 认证
nikto -h http://target.com -Add-header "Cookie: session=abc123"
# 自定义 User-Agent
nikto -h http://target.com -useragent "Mozilla/5.0"
# 通过代理
nikto -h http://target.com -useproxy http://127.0.0.1:8080
# 禁用 404 猜测（减少误报）
nikto -h http://target.com -no404Phase 4: 输出格式
# JSON 输出
nikto -h http://target.com -Format json -output results.json
# HTML 报告
nikto -h http://target.com -Format html -output report.html
# CSV 输出
nikto -h http://target.com -Format csv -output results.csv
# XML 输出
nikto -h http://target.com -Format xml -output results.xml常用场景速查
| 场景 | 命令 |
|---|---|
| 快速扫描 | nikto -h http://target.com -maxtime 120 |
| 全面扫描 | nikto -h http://target.com -Tuning 123456789abc |
| SSL 检查 | nikto -h https://target.com -Plugins ssl |
| 信息泄露 | nikto -h http://target.com -Tuning 3 |
| 带认证扫描 | nikto -h http://target.com -id admin:pass |
Related skills
Setup Matt Pocock SkillsScaffold the per-repo configuration that Matt Pocock’s engineering agent skills rely on so they understand the issue tracker, triage labels, and domain documentation la495k196k
Lark AppsConnect Claude, Cursor or custom agents directly to Lark (Feishu) for messaging, document automation, approval workflows and enterprise data access.402k
CavemanSlash token usage by roughly 75% while keeping every technical detail intact when working with Claude Code, Cursor or similar agents.391k94.7k
Lark Skill MakerQuickly turn any Lark/Feishu OpenAPI call or multi-step workflow into a reusable agent skill with its own SKILL.md.386k16k
Running Claude Code Via Litellm CopilotRun Claude Code at a fraction of the cost by routing requests through LiteLLM to the GitHub Copilot Chat API.270k72
Codex PetGenerate a complete Codex Pet spritesheet and metadata from one reference image without needing an OpenAI key or Codex Pro.246k10AI & Agent Buildingagents