服务器扫描工具nikto查看http-method

1. download perl
command :sudo apt-get install perl

2. download nikto
link: https://cirt.net/nikto/nikto-2.1.4.tar.gz
decompress: tar -zxvf nikto-2.1.4.tar.gz

3. go to the relevant dir
basic command:
perl nikto.pl -H (see help)
perl nikto.pl -host 172.16.4.21 -p 8080

this tool is found today, in order to check if the http-method trace is turned off or not on glassfish2.1.1, it is very wired that you cannot control trace method by admin console, but in glassfish3.1 it has, I think maybe this in a bug already repaired by glassfish team.
so in glassfish2, likely can do like this:

1. write  <property name="traceEnabled" value="false"/> between<http-service> </http-service> in domain.xml under
glassfish/2.1.1/domains/

domain1/config  to turn off the trace method.

2. using nikto tool to test if the trace method works or not, the command is:
perl nikto.pl -host 172.16.4.21:8080