RULE（RULE ID：309718）

Rule General Information
Release Date: 2012-07-17
Rule Name: Tool Scanner Nikto Detection
Severity:
CVE ID:
Rule Protection Details
Description: Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 2200 potentially dangerous files/CGIs, versions on over 140 servers, and problems on over 210 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).
Impact: Attackers use attack tools to attack targets, which can lead to data leakage, service interruption, system crash, data tampering, and illegal access.
Affected OS: Network Device, Solaris, FreeBSD, Windows, Other Unix, Linux
Reference:
Solutions
1. Scan the server file system to ensure that there are no hacker tools and related malicious files. 2. Complete system backup to ensure server data security. 3. Harden the security of the server, restrict access permissions, install firewalls, and use secure access control lists.