In this challenge, let's focus on using Nikto.
And the reason for that is,
is because Nikto is one of the primary tools
whenever we look at pen testing
and vulnerability assessment as a whole,
not a Dutch wink wink type thing.
And whenever we run this,
it's also getting that familiarity.
Now, that being said,
one of the things that I want to see
if we can accomplish is,
is running Nikto against a website of familiarity.
Now, do keep in mind that doing this requires permission.
So, or requires permission.
So if you need to, inside the lab, use the BWAP,
but if you have permission from a buddy of yours
that has their own personal website,
by all means, go ahead.
And in the solution,
we'll compare notes on how all those results came back.