Nikto

Comprehensive web server scanning

Performs over 6000 tests to identify known security vulnerabilities and misconfigurations on web servers.

Vulnerability detection

Discovers known web application and script vulnerabilities, as well as tests for web server configuration errors with security implications.

Software identification

Identifies installed software on web servers via headers, favicons, and files.

IDS testing

Assesses the effectiveness of an intrusion detection system (IDS) by generating significant traffic and log entries.

Multiple target scanning

Allows scanning of web servers on different virtual host names, directly on the IP address, and on sub paths off the root to yield different results.