Skip to content

Improve Nikto examples #1868

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Zero3141 merged 2 commits into from
Aug 25, 2023
Merged

Improve Nikto examples #1868

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a6b1fdd
Improve nikto examples
Aug 22, 2023
9493624
Update scanners/nikto/examples/demo-bodgeit/README.md
Zero3141 Aug 25, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions scanners/nikto/examples/demo-bodgeit/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
<!--
SPDX-FileCopyrightText: the secureCodeBox authors
SPDX-License-Identifier: Apache-2.0
-->

In this example, we execute an nikto scan against the intentionally vulnerable [bodgeit](https://github.com/psiinon/bodgeit)


#### Initialize bodgeit in cluster

Before executing the scan, make sure to setup bodgeit
```bash
helm upgrade --install bodgeit secureCodeBox/bodgeit --wait
```
250 changes: 250 additions & 0 deletions scanners/nikto/examples/demo-bodgeit/findings.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,250 @@
[{
"name": "/: The anti-clickjacking X-Frame-Options header is not present.",
"description": null,
"category": "X-Frame-Options Header",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "LOW",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 999957,
"references": [{
"type": "URL",
"value": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options"
}]
},
"id": "6be1c099-35e1-44b3-a492-a718b433bbaf",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type.",
"description": null,
"category": "X-Content-Type-Options Header",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "INFORMATIONAL",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 999103,
"references": [{
"type": "URL",
"value": "https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/"
}]
},
"id": "e8f6fe9a-9ec1-46ff-a0b3-f9150dae70a4",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/favicon.ico: identifies this app/server as: Apache Tomcat (possibly 5.5.26 through 8.0.15), Alfresco Community.",
"description": null,
"category": "Identified Software",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "INFORMATIONAL",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 500645,
"references": [{
"type": "URL",
"value": "https://en.wikipedia.org/wiki/Favicon"
}]
},
"id": "7fd8b1d6-c783-48a7-98a1-d4bd100badef",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "OPTIONS: Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, OPTIONS .",
"description": null,
"category": "Nikto Finding",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "INFORMATIONAL",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "OPTIONS",
"port": 8080,
"niktoId": 999990,
"references": null
},
"id": "60d87413-9abc-4ce2-b0e2-6e898b7a3dc6",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "HTTP method ('Allow' Header): 'PUT' method could allow clients to save files on the web server.",
"description": null,
"category": "Nikto Finding",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "INFORMATIONAL",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 400001,
"references": null
},
"id": "4d2f499d-e475-417c-8d17-12e2a993e2c9",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "HTTP method ('Allow' Header): 'DELETE' may allow clients to remove files on the web server.",
"description": null,
"category": "Nikto Finding",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "INFORMATIONAL",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 400000,
"references": null
},
"id": "a2862265-8ae0-4f1f-8333-8b7d30439db2",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/examples/servlets/index.html: Apache Tomcat default JSP pages present.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 366,
"references": null
},
"id": "5f46e9f4-5938-4c19-915c-5fa21e8e3c65",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/examples/jsp/snp/snoop.jsp: Displays information about page retrievals, including other users.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 1355,
"references": [{
"type": "URL",
"value": "CVE-2004-2104"
}]
},
"id": "969467d0-9acc-4eb9-89d3-ec8b46382d3f",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/manager/manager-howto.html: Tomcat documentation found.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 3399,
"references": [{
"type": "URL",
"value": "CWE-552"
}]
},
"id": "c0e6a10e-3293-4fe1-9bad-1c79398c8628",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/manager/html: Default Tomcat Manager / Host Manager interface found.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 6525,
"references": null
},
"id": "57a6c749-aa20-4c01-9ed4-bb7335fc42ea",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/host-manager/html: Default Tomcat Manager / Host Manager interface found.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 6525,
"references": null
},
"id": "804e3905-1fde-48e2-986f-71479334386a",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/manager/status: Default Tomcat Server Status interface found.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 7015,
"references": null
},
"id": "4e749f1c-2413-4ffd-8ab6-ed5e3220f743",
"parsed_at": "2023-08-22T13:18:46.280Z"
}, {
"name": "/host-manager/status: Default Tomcat Server Status interface found.",
"description": null,
"category": "Potential Vulnerability",
"location": "http://bodgeit",
"osi_layer": "NETWORK",
"severity": "HIGH",
"attributes": {
"ip_addresses": ["10.96.235.197"],
"hostname": "bodgeit",
"banner": "",
"method": "GET",
"port": 8080,
"niktoId": 7015,
"references": null
},
"id": "1ed55f05-5c4a-4a17-92fc-b7471beda8d6",
"parsed_at": "2023-08-22T13:18:46.280Z"
}]
63 changes: 0 additions & 63 deletions scanners/nikto/examples/demo-bodgeit/findings.yaml
View file
Open in desktop

This file was deleted.

12 changes: 6 additions & 6 deletions scanners/nikto/examples/demo-bodgeit/nikto-results.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,31 +1,31 @@
{
"host": "bodgeit.demo-targets.svc",
"ip": "10.96.46.204",
"host": "bodgeit",
"ip": "10.96.235.197",
"port": "8080",
"banner": "",
"vulnerabilities": [{
"id": "999957",
"references": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options",
"method": "GET",
"url": "",
"msg": "The anti-clickjacking X-Frame-Options header is not present."
"msg": "/: The anti-clickjacking X-Frame-Options header is not present."
}, {
"id": "999103",
"references": "https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/",
"method": "GET",
"url": "",
"msg": "The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type."
"msg": "/: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type."
}, {
"id": "500645",
"references": "https://en.wikipedia.org/wiki/Favicon",
"method": "GET",
"url": "",
"msg": "/favicon.ico file identifies this app/server as: Apache Tomcat (possibly 5.5.26 through 8.0.15), Alfresco Community."
"msg": "/favicon.ico: identifies this app/server as: Apache Tomcat (possibly 5.5.26 through 8.0.15), Alfresco Community."
}, {
"id": "999990",
"method": "OPTIONS",
"url": "",
"msg": "Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, OPTIONS ."
"msg": "OPTIONS: Allowed HTTP Methods: GET, HEAD, POST, PUT, DELETE, OPTIONS ."
}, {
"id": "400001",
"method": "GET",
Expand Down
2 changes: 1 addition & 1 deletion scanners/nikto/examples/demo-bodgeit/scan.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ spec:
scanType: "nikto"
parameters:
- "-h"
- "bodgeit.demo-targets.svc"
- "bodgeit"
- "-port 8080"
- "-Tuning"
# Only enable fast (ish) Scan Options, remove attack option like SQLi and RCE. We will leave those to ZAP
Expand Down
Loading