Scan three fictional lab web servers, from hardened to messy, and read genuine Nikto-style findings - outdated software, missing headers, an exposed backup archive, an open .git folder, and more.
Ideal for: Web app pentesting beginners learning to read a Nikto report and prioritize findings before running one against a real target.
What you'll practice
Scan three lab hosts with real "nikto -h <ip>" syntax and see how findings scale with a server's hygiene