Vulnerability Analysis

Once Information Gathering has mapped what’s there, this category scans it for known weaknesses — the step between “here’s what exists” and “here’s what’s exploitable.”

Tool Source Notes
nikto official Web server vulnerability scanner

A small category on purpose — most of the deeper scanning work in this menu lives one category over, in Web Application Analysis.