False Positive/Negative: Potentially interesting archive/cert file found

[obi-jon]

Output of suspected false positive / negative

It appears that Nikto is only looking for Status OK or Redirection responses to identify potentially interesting archives/certs. Applications that redirect the user to a log in/home page will cause all these "interesting" files to be false positives.

Maybe consider comparing the responses to ensure that they aren't all pointing to the exact same path.

[adi928]

I traced it down to plugins/nikto_sitefiles.plugin
for now, if you rename this file to something else, it will not be used during the scan.
Not a solution, but until I learn perl (I guess)

[sullo]

Duplicate of #728.