retard@aghadiry1:~/ssh/nikto$ perl nikto.pl -h www.emeckz.com
-***** SSL support not available (see docs for SSL install instructions) *****
---------------------------------------------------------------------------
- Nikto 1.35/1.34 - www.cirt.net
+ Target IP: 66.28.206.153
+ Target Hostname: www.emeckz.com
+ Target Port: 80
+ Start Time: Tue Jul 18 01:26:09 2006
---------------------------------------------------------------------------
- Scan is dependent on "Server" string which can be faked, use -g to override
+ Server: Apache
+ Server does not respond with '404' for error messages (uses '403').
+ This may increase false-positives.
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ /cgi-bin/test-cgi - Apache 2.0 default script is executable and reveals system information. All default scripts should be removed. (GET)
+ /index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET)
+ /index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET)
+ /index.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET)
+ /index.php?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 - PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings. OSVDB-12184. (GET)
+ /index.php?module=My_eGallery - My_eGallery prior to 3.1.1.g are vulnerable to a remote execution bug via SQL command injection. (GET)
+ /index.php?top_message=<script>alert(document.cookie)</script> - Led-Forums allows any user to change the welcome message, and it is vulnerable to Cross Site Scripting (XSS). CA-2000-02. (GET)
+ /css - Redirects to http://www.emeckz.com/css/ , This might be interesting...
+ /downloads/ - This might be interesting... (GET)
+ /forums/ - This might be interesting... (GET)
+ /js - Redirects to http://www.emeckz.com/js/ , This might be interesting...
+ /pics/ - This might be interesting... (GET)
+ /index.php?base=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ /index.php?IDAdmin=test - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ /index.php?pymembs=admin - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ /index.php?SqlQuery=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ /index.php?tampon=test%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ /index.php?topic=&lt;script&gt;alert(document.cookie)&lt;/script&gt;%20 - This might be interesting... has been seen in web logs from an unknown scanner. (GET)
+ 1942 items checked - 16 item(s) found on remote host(s)
+ End Time: Tue Jul 18 01:29:26 2006 (197 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
retard@aghadiry1:~/ssh/nikto$