\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{r.taylor27} \pdfinfo{ /Title (nikto-cheat-sheet-rt.pdf) /Creator (Cheatography) /Author (r.taylor27) /Subject (Nikto - rt Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{0A14A3} \definecolor{LightBackground}{HTML}{F7F7FC} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{Nikto - rt Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{r.taylor27} via \textcolor{DarkBackground}{\uline{cheatography.com/203398/cs/43316/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}r.taylor27 \\ \uline{cheatography.com/r-taylor27} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Published 6th May, 2024.\\ Updated 6th May, 2024.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{3} \begin{tabularx}{5.377cm}{x{0.9154 cm} x{1.46464 cm} x{2.19696 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Testing}} \tn % Row 0 \SetRowColor{LightBackground} Single Port & Host/IP & nikto -h 192.168.0.1 \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} & Specify Port & nikto -h 192.168.0.1 -p 443 \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} & URL/PORT & nikto -h \seqsplit{https://192.168.0.1:443/} \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} & SSL & nikto -h 192.168.0.1 -p 443 -ssl \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} \seqsplit{Multiple} Ports & Same Host & nikto -h 192.168.0.1 -p 80,88,443 \tn % Row Count 10 (+ 2) % Row 5 \SetRowColor{white} & Multiple Host via .txt & 192.168.0.1:80 \tn % Row Count 12 (+ 2) % Row 6 \SetRowColor{LightBackground} & & \seqsplit{http://192.168.0.1:8080/} \tn % Row Count 14 (+ 2) % Row 7 \SetRowColor{white} & & 192.168.0.3 \tn % Row Count 15 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}---} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.73232 cm} x{1.92234 cm} x{1.92234 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Annotated Option List}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{3}{x{5.377cm}}{-Display+} \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} & 1 Show redirects & 2 Show cookies received \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} & 3 Show all 200/OK responses & 4 Show URLs which require authentication \tn % Row Count 6 (+ 3) % Row 3 \SetRowColor{white} & D Debug output & E Display all HTTP errors \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} & P Print progress to STDOUT & S Scrub outupt of IPs and hostnames \tn % Row Count 11 (+ 3) % Row 5 \SetRowColor{white} & V Verbose output & \tn % Row Count 12 (+ 1) % Row 6 \SetRowColor{LightBackground} \mymulticolumn{3}{x{5.377cm}}{-evasion+} \tn % Row Count 13 (+ 1) % Row 7 \SetRowColor{white} & 1 Random URI encoding (non-UTF8) & 2 Directory self-reference (/./) \tn % Row Count 15 (+ 2) % Row 8 \SetRowColor{LightBackground} & 3 Premature URL ending & 4 Prepend long random string \tn % Row Count 17 (+ 2) % Row 9 \SetRowColor{white} & 5 Fake parameter & 6 TAB as request spacer \tn % Row Count 19 (+ 2) % Row 10 \SetRowColor{LightBackground} & 7 Change the case of the URL & 8 Use Windows directory separator () \tn % Row Count 22 (+ 3) % Row 11 \SetRowColor{white} & A Use a carriage return (0x0d) as a request spacer & B Use binary value 0x0b as a request spacer \tn % Row Count 26 (+ 4) % Row 12 \SetRowColor{LightBackground} \mymulticolumn{3}{x{5.377cm}}{} \tn % Row Count 26 (+ 0) % Row 13 \SetRowColor{white} -Help & Help File & \tn % Row Count 27 (+ 1) % Row 14 \SetRowColor{LightBackground} \seqsplit{-list-plugins} & List all available plugins, perform no testing & \tn % Row Count 30 (+ 3) \end{tabularx} \par\addvspace{1.3em} \vfill \columnbreak \begin{tabularx}{5.377cm}{p{0.73232 cm} x{1.92234 cm} x{1.92234 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Annotated Option List (cont)}} \tn % Row 15 \SetRowColor{LightBackground} \seqsplit{-mutate+} & Guess additional file names: & \tn % Row Count 2 (+ 2) % Row 16 \SetRowColor{white} & 1 Test all files with all root directories & 2 Guess for password file names \tn % Row Count 5 (+ 3) % Row 17 \SetRowColor{LightBackground} & 3 Enumerate user names via Apache (/\textasciitilde{}user type requests) & 4 Enumerate user names via cgiwrap (/cgi-bin/cgiwrap/\textasciitilde{}user type requests) \tn % Row Count 10 (+ 5) % Row 18 \SetRowColor{white} & 5 Attempt to brute force sub-domain names, assume that the host name is the parent domain & 6 Attempt to guess directory names from the supplied dictionary file \tn % Row Count 16 (+ 6) % Row 19 \SetRowColor{LightBackground} \seqsplit{-mutate-options} & Provide information for mutates & \tn % Row Count 19 (+ 3) % Row 20 \SetRowColor{white} \seqsplit{-port+} & Port to use (default 80) & \tn % Row Count 21 (+ 2) % Row 21 \SetRowColor{LightBackground} \seqsplit{-Tuning+} & Scan tuning: & \tn % Row Count 23 (+ 2) % Row 22 \SetRowColor{white} & 1 Interesting File / Seen in logs & 2 \seqsplit{Misconfiguration} / Default File \tn % Row Count 26 (+ 3) % Row 23 \SetRowColor{LightBackground} & 3 Information Disclosure & 4 Injection \seqsplit{(XSS/Script/HTML)} \tn % Row Count 28 (+ 2) % Row 24 \SetRowColor{white} & 5 Remote File Retrieval - Inside Web Root & 6 Denial of Service \tn % Row Count 31 (+ 3) \end{tabularx} \par\addvspace{1.3em} \vfill \columnbreak \begin{tabularx}{5.377cm}{p{0.73232 cm} x{1.92234 cm} x{1.92234 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Annotated Option List (cont)}} \tn % Row 25 \SetRowColor{LightBackground} & 7 Remote File Retrieval - Server Wide & 8 Command Execution / Remote Shell \tn % Row Count 3 (+ 3) % Row 26 \SetRowColor{white} & 9 SQL Injection & 0 File Upload \tn % Row Count 4 (+ 1) % Row 27 \SetRowColor{LightBackground} & a Authentication Bypass & b Software Identification \tn % Row Count 6 (+ 2) % Row 28 \SetRowColor{white} & c Remote Source Inclusion & d WebService \tn % Row Count 8 (+ 2) % Row 29 \SetRowColor{LightBackground} & e Administrative Console & x Reverse Tuning Options (i.e., include all except specified) \tn % Row Count 12 (+ 4) \hhline{>{\arrayrulecolor{DarkBackground}}---} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{p{0.4577 cm} x{2.10542 cm} x{2.01388 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Scan Tuning}} \tn % Row 0 \SetRowColor{LightBackground} \seqsplit{-Tuning} & 0 File Upload & 1 Interesting File/ Seen in Logs \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} & 2 \seqsplit{Misconfiguration/Default} File & 3 Information Disclosure \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} & 4 Injection & 5 Remote File Retrieval - Web \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} & 6 Denial of Service & 7 Remote File Retrieval - Server \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} & 8 Command Execution / Remote Shell & 9 SQL Injection \tn % Row Count 10 (+ 2) % Row 5 \SetRowColor{white} & a Auth Bypass & b Software ID \tn % Row Count 11 (+ 1) % Row 6 \SetRowColor{LightBackground} & c Remote Source & x Reverse Tuning \tn % Row Count 12 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}---} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Using a Proxy}} \tn % Row 0 \SetRowColor{LightBackground} Via Command Line & Via nikto.conf \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} ./nikto.pl -h localhost -useproxy \seqsplit{http://localhost:8080/} & PROXYHOST= PROXYPORT= PROXYUSER= PROXYPASS= \tn % Row Count 4 (+ 3) % Row 2 \SetRowColor{LightBackground} & perl nikto.pl -h localhost -p 80 -useproxy \tn % Row Count 7 (+ 3) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.14471 cm} x{3.83229 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Debugging \& Updating}} \tn % Row 0 \SetRowColor{LightBackground} \seqsplit{Debugging} & -Display v (verbose) d (debug) \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} Updating & git pull \tn % Row Count 2 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{5.377cm}}{\bf\textcolor{white}{Interactive Features}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{SPACE - Report current scan status} \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{v - Turn verbose mode on/off} \tn % Row Count 2 (+ 1) % Row 2 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{d - Turn debug mode on/off} \tn % Row Count 3 (+ 1) % Row 3 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{e - Turn error reporting on/off} \tn % Row Count 4 (+ 1) % Row 4 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{p - Turn progress reporting on/off} \tn % Row Count 5 (+ 1) % Row 5 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{r - Turn 3xx/redirect display on/off} \tn % Row Count 6 (+ 1) % Row 6 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{c - Turn cookie display on/off} \tn % Row Count 7 (+ 1) % Row 7 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{o - Turn 200/OK display on/off} \tn % Row Count 8 (+ 1) % Row 8 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{a - Turn auth display on/off} \tn % Row Count 9 (+ 1) % Row 9 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{q - Quit (gracefully)} \tn % Row Count 10 (+ 1) % Row 10 \SetRowColor{LightBackground} \mymulticolumn{1}{x{5.377cm}}{N - Next host/post} \tn % Row Count 11 (+ 1) % Row 11 \SetRowColor{white} \mymulticolumn{1}{x{5.377cm}}{P - Pause} \tn % Row Count 12 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}