search

sullo / nikto

Nikto web server scanner
Other
8.36k stars 1.21k forks source link

Question about a functionality: finding backup files #285

Closed Sinkmanu closed 8 years ago

Sinkmanu commented 8 years ago

Hello, I miss a functionality in nikto. For example when a page is written in PHP and we know the file is config.php, nikto should try config.php~, config.php.old (and more).

What do you think about this?

Regards,

sullo commented 8 years ago

Sorry for the delay, but this falls into the realm of a crawling web security tool, which Nikto isn't. There are some checks for backup files in the db_tests but they are not based on the files actually seen on the server at this point.