Skip to content

User Defined Tests

sullo edited this page Aug 14, 2018 · 1 revision

Users can create their own, private tests for any of the databases. By placing a syntactically correct database file in the databases directory, with a file name prefaced with a "u", the data will be loaded along with the built-in checks.

For example, create the file databases/udb_tests and it will be loaded at the same time databases/db_tests is loaded. These files will also be checked for syntax when -dbcheck is used.

For tests which require a "private" OSVDB ID, use the OSVDB ID 0 (zero). This should be used for all vulnerabilities that do not (or should not) exist in OSVDB, as ID 0 is for testing only.

For the "Test ID", it is required that you use unique numbers between 400000 and 499999 to allow for growth of the Nikto database without interfering with your own tests (note: numbers above 500000 are reserved for other tests).

When possible, please help Nikto's continued success by sending test updates to [email protected].