Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: vhost switch not working properly #834

Open
hood10 opened this issue Jul 1, 2024 · 0 comments
Open

Bug: vhost switch not working properly #834

hood10 opened this issue Jul 1, 2024 · 0 comments
Labels

Comments

@hood10
Copy link

hood10 commented Jul 1, 2024

Looks like the vhost switch does not enter the value in the Host header but in the hostname

Nikto version

Nikto 2.5.0 (LW 2.5)

nikto -vhost app.inlanefreight.local -host http://10.129.117.167 -D v  
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_auth                                                                                                                                                                                 
V:Mon Jul  1 20:38:40 2024 - Loaded "Test Authentication" plugin.                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_cgi                                                                                                                                                                                  
V:Mon Jul  1 20:38:40 2024 - Loaded "CGI" plugin.                                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_sqlg                                                                                                                                                                          
V:Mon Jul  1 20:38:40 2024 - Loaded "Generic SQL reports" plugin.                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_json                                                                                                                                                                          
V:Mon Jul  1 20:38:40 2024 - Loaded "JSON reports" plugin.                                                                                                                                                                                  
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_text                                                                                                                                                                          
V:Mon Jul  1 20:38:40 2024 - Loaded "Text reports" plugin.                                                                                                                                                                                  
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_nbe                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Loaded "NBE reports" plugin.                                                                                                                                                                                   
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_tests                                                                                                                                                                                
V:Mon Jul  1 20:38:40 2024 - Loaded "Nikto Tests" plugin.                                                                                                                                                                                   
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_shellshock                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Loaded "shellshock" plugin.                                                                                                                                                                                    
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_apache_expect_xss                                                                                                                                                                    
V:Mon Jul  1 20:38:40 2024 - Loaded "Apache Expect XSS" plugin.                                                                                                                                                                             
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_docker_registry                                                                                                                                                                      
V:Mon Jul  1 20:38:40 2024 - Loaded "docker_registry" plugin.                                                                                                                                                                               
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_multiple_index                                                                                                                                                                       
V:Mon Jul  1 20:38:40 2024 - Loaded "Multiple Index" plugin.                                                                                                                                                                                
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_embedded                                                                                                                                                                             
V:Mon Jul  1 20:38:40 2024 - Loaded "Embedded Detection" plugin.                                                                                                                                                                            
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_csv                                                                                                                                                                           
V:Mon Jul  1 20:38:40 2024 - Loaded "CSV reports" plugin.                                                                                                                                                                                   
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_msgs                                                                                                                                                                                 
V:Mon Jul  1 20:38:40 2024 - Loaded "Server Messages" plugin.                                                                                                                                                                               
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_core                                                                                                                                                                                 
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_headers                                                                                                                                                                              
V:Mon Jul  1 20:38:40 2024 - Loaded "HTTP Headers" plugin.                                                                                                                                                                                  
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_paths                                                                                                                                                                                
V:Mon Jul  1 20:38:40 2024 - Loaded "Path Search" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_apacheusers
V:Mon Jul  1 20:38:40 2024 - Loaded "Apache Users" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_cookies
V:Mon Jul  1 20:38:40 2024 - Loaded "HTTP Cookie Internal IP" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_negotiate
V:Mon Jul  1 20:38:40 2024 - Loaded "Negotiate" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_strutshock
V:Mon Jul  1 20:38:40 2024 - Loaded "strutshock" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_drupal
V:Mon Jul  1 20:38:40 2024 - Loaded "Drupal Specific Tests" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_parked
V:Mon Jul  1 20:38:40 2024 - Loaded "Parked Detection" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_httpoptions
V:Mon Jul  1 20:38:40 2024 - Loaded "HTTP Options" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_domino
V:Mon Jul  1 20:38:40 2024 - Loaded "IBM/Lotus Domino Specific Tests" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_dictionary_attack
V:Mon Jul  1 20:38:40 2024 - Loaded "Dictionary attack" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_siebel
V:Mon Jul  1 20:38:40 2024 - Loaded "Siebel Checks" plugin. 
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_content_search
V:Mon Jul  1 20:38:40 2024 - Loaded "Content Search" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_fileops
V:Mon Jul  1 20:38:40 2024 - Loaded "File Operations" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_dishwasher
V:Mon Jul  1 20:38:40 2024 - Loaded "dishwasher" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_robots
V:Mon Jul  1 20:38:40 2024 - Loaded "Robots" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_outdated
V:Mon Jul  1 20:38:40 2024 - Loaded "Outdated" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_sitefiles
V:Mon Jul  1 20:38:40 2024 - Loaded "Site Files" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_ssl
V:Mon Jul  1 20:38:40 2024 - Loaded "SSL and cert checks" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_favicon
V:Mon Jul  1 20:38:40 2024 - Loaded "Favicon" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_xml
V:Mon Jul  1 20:38:40 2024 - Loaded "Report as XML" plugin. 
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_clientaccesspolicy
V:Mon Jul  1 20:38:40 2024 - Loaded "clientaccesspolicy.xml" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_put_del_test
V:Mon Jul  1 20:38:40 2024 - Loaded "Put/Delete test" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_origin_reflection
V:Mon Jul  1 20:38:40 2024 - Loaded "CORS Origin Reflection" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_ms10_070
V:Mon Jul  1 20:38:40 2024 - Loaded "ms10-070 Check" plugin.
V:Mon Jul  1 20:38:40 2024 - Initialising plugin nikto_report_html
V:Mon Jul  1 20:38:40 2024 - Loaded "Report as HTML" plugin.
V:Mon Jul  1 20:38:40 2024 - Getting targets
V:Mon Jul  1 20:38:40 2024 - Opening reports (none, )
V:Mon Jul  1 20:38:40 2024 - 6954 server checks loaded
V:Mon Jul  1 20:38:40 2024 - Running start for "HTTP Headers" plugin
V:Mon Jul  1 20:38:40 2024 - Running start for "Drupal Specific Tests" plugin
V:Mon Jul  1 20:38:40 2024 - Running start for "IBM/Lotus Domino Specific Tests" plugin
V:Mon Jul  1 20:38:40 2024 - Running start for "Favicon" plugin
V:Mon Jul  1 20:38:40 2024 - Running start for "Test Authentication" plugin
V:Mon Jul  1 20:38:40 2024 - Running start for "Content Search" plugin
V:Mon Jul  1 20:38:40 2024 - Checking for HTTP on app.inlanefreight.local:80, using GET
V:Mon Jul  1 20:38:47 2024 -  for GET:
V:Mon Jul  1 20:38:47 2024 - Checking for HTTPS on app.inlanefreight.local:80, using GET
V:Mon Jul  1 20:38:53 2024 -  for GET:
---------------------------------------------------------------------------
+ 0 host(s) tested                                         
V:Mon Jul  1 20:38:53 2024 + 4 requests made in 13 seconds

@hood10 hood10 added the bug label Jul 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant