search

sullo / nikto

Nikto web server scanner
Other
8.61k stars 1.24k forks source link

NIkto reporting uncommon headers in scan #479

Closed ashishmishraw closed 7 years ago

ashishmishraw commented 7 years ago

Version 2.1.5

After running REST API vulnerability scan on ports 80, 443 and 8443, I am getting the following warnings:

  1. Uncommon header 'x-content-type-options' found, with contents: nosniff
  2. Uncommon header 'x-frame-options' found, with contents: SAMEORIGIN

Not sure what is uncommon header in x-content-type and x-frame-options ? They are very valid headers used in HTTP requests

Any insight into what could have this warnings possibly mean ?

sullo commented 7 years ago

Try running from the git version. It has a lot of updates since 2.1.5.

On May 18, 2017, at 12:29 AM, ashish mishra notifications@github.com wrote:

Version 2.1.5

After running port vulnerability scan I am getting the following warnings:

Uncommon header 'x-content-type-options' found, with contents: nosniff Uncommon header 'x-frame-options' found, with contents: SAMEORIGIN Not sure what is uncommon header in x-content-type and x-frame-options ? They are very valid headers used in HTTP requests

Any insight into what could have this warnings possibly mean ?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.