Move report opening a bit sooner.

Add a full report item for a 'no web server' message (check id 000029).
PangMing · May 3, 2016 · d5ecf92 · d5ecf92
1 parent b7f1902
commit d5ecf92
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/program/nikto.pl b/program/nikto.pl
@@ -88,6 +88,9 @@
     $CLI{'cert'} = $CLI{'key'}  unless (defined($CLI{'cert'}));
 }
 
+# Open reporting
+report_head($CLI{'format'}, $CLI{'file'});
+
 # Now check each target is real and remove duplicates/fill in extra information
 foreach my $mark (@MARKS) {
     $mark->{'test'} = 1;
@@ -121,9 +124,6 @@
     }
 }
 
-# Open reporting
-report_head($CLI{'format'}, $CLI{'file'});
-
 # Load db_tests
 set_scan_items();
 

diff --git a/program/plugins/nikto_core.plugin b/program/plugins/nikto_core.plugin
@@ -1644,7 +1644,7 @@ sub port_check {
         }
     }
 
-    nprint("+ No web server found on " . ($hostname || $ip) . ":$port");
+    add_vulnerability($m,"No web server found on " . ($hostname || $ip) . ":$port", '000029', '', '', '/', $request, $response, "No HTTP response");
     nprint("---------------------------------------------------------------------------");
 
     return 0;
@@ -1930,6 +1930,7 @@ sub report_summary {
 ###############################################################################
 sub report_item {
     my ($mark, $item) = @_;
+    if ($item->{'uri'} == 'undef') { $item->{'uri'} = '/'; }
 
     # Go through all reporting modules
     foreach my $reporter (@REPORTS) {