Nikto Integration with DefectDojo
Nikto is an open-source web server vulnerability scanner that performs comprehensive security assessments by testing for over 7,000 potentially dangerous files and programs, outdated server software versions, misconfigurations, and common security vulnerabilities across web servers and applications. The tool conducts extensive automated testing with regularly updated plugins and scan items, identifying issues such as SQL injection vulnerabilities, cross-site scripting flaws, insecure server configurations, multiple index files, dangerous CGI scripts, and information disclosure problems to help security professionals and system administrators proactively identify and remediate web server security risks.
Data Granularity: What Gets Imported
The following fields are captured from Nikto results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Nikto",
"engagement": "<engagement-id>",
"file": "results.json"
}