```bash nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://stockfill.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt" ``` [/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt): ``` perl: warning: Setting locale failed. perl: warning: Please check that your locale settings: LANGUAGE = (unset), LC_ALL = (unset), LC_CTYPE = (unset), LC_NUMERIC = "en_AU.UTF-8", LC_COLLATE = (unset), LC_TIME = "en_AU.UTF-8", LC_MESSAGES = (unset), LC_MONETARY = "en_AU.UTF-8", LC_ADDRESS = "en_AU.UTF-8", LC_IDENTIFICATION = "en_AU.UTF-8", LC_MEASUREMENT = "en_AU.UTF-8", LC_PAPER = "en_AU.UTF-8", LC_TELEPHONE = "en_AU.UTF-8", LC_NAME = "en_AU.UTF-8", LANG = "en_US.UTF-8" are supported and installed on your system. perl: warning: Falling back to a fallback locale ("en_US.UTF-8"). - Nikto v2.6.0 --------------------------------------------------------------------------- + Your Nikto installation is out of date. + Target IP: 167.179.167.166 + Target Hostname: stockfill.lan.ddnsgeek.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=stockfill.lan.ddnsgeek.com CN: stockfill.lan.ddnsgeek.com SAN: stockfill.lan.ddnsgeek.com Ciphers: TLS_AES_128_GCM_SHA256 Issuer: /C=US/O=Let's Encrypt/CN=R13 + Platform: Unknown + Start Time: 2026-04-14 04:30:11 (GMT0) --------------------------------------------------------------------------- + Server: nginx/1.27.5 + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [001869] /stats.html: This might be interesting. + [002743] /.bash_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web. + [002756] /.sh_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web. ```