Which tool performs comprehensive tests against web servers for vulnerabilities?

Which tool performs comprehensive tests against web servers for vulnerabilities?

• A. Metasploit
• B. Nmap
• C. Wireshark
• D. Nikto

Answer: (D)

A tool that specializes in web server vulnerability scanning performs broad checks against HTTP/S endpoints to surface misconfigurations, outdated software, dangerous files, and other known issues. Nikto is built for this purpose and scans web servers across a wide range of potential problems, including default or insecure files, misconfigurations, CGI script issues, and version-specific vulnerabilities. It flaggs findings in a report so you can address weaknesses quickly. In contrast, Metasploit is primarily an exploitation framework used to develop and run exploits once vulnerabilities are known. Nmap focuses on network discovery, port scanning, and service identification, with optional vulnerability probing, but it’s not a comprehensive web server vulnerability tester. Wireshark is a network protocol analyzer used to observe and troubleshoot traffic, not to assess web server security. So the tool that best fits the goal of comprehensive web server vulnerability testing is Nikto.

A tool that specializes in web server vulnerability scanning performs broad checks against HTTP/S endpoints to surface misconfigurations, outdated software, dangerous files, and other known issues. Nikto is built for this purpose and scans web servers across a wide range of potential problems, including default or insecure files, misconfigurations, CGI script issues, and version-specific vulnerabilities. It flaggs findings in a report so you can address weaknesses quickly.

In contrast, Metasploit is primarily an exploitation framework used to develop and run exploits once vulnerabilities are known. Nmap focuses on network discovery, port scanning, and service identification, with optional vulnerability probing, but it’s not a comprehensive web server vulnerability tester. Wireshark is a network protocol analyzer used to observe and troubleshoot traffic, not to assess web server security. So the tool that best fits the goal of comprehensive web server vulnerability testing is Nikto.