ADMIN: Scanning servers with Nikto

The Nikto scanner performs multiple comprehensive tests against web servers.
An abundance of security tools tout their wares on the Internet these days, making it difficult to sift the wheat from the chaff. Many such tools are proprietary, some are unquestionably good value for the money, and some tools are overpriced but marketed well. When surrounded by all these options, however, remember that a sizeable number of highly sophisticated open source tools are available as well.

REF: http://www.admin-magazine.com/Archive/2019/51/Scanning-servers-with-Nikto

nmap vulnerability assessment

nmap is easy to use for simple simple vulnerability assessment. For example, checking port 445 for preventing SMB attacks from WannaCry:

nmap -PN 192.0.0/24 -p 445 | grep -B 4 "tcp open"
-PN: Treat all hosts as online -- skip host discovery

nmap host discovery

http://nmap.org/book/man-host-discovery.html


nmap -v -n -sP my.network.0/24  | grep -A 1 up > scannow.txt
diff scannow.txt scanbase.txt