```bash nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://familytree.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt" ``` [/root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt): ``` - Nikto v2.6.0 --------------------------------------------------------------------------- + Your Nikto installation is out of date. + Target IP: 167.179.167.166 + Target Hostname: familytree.lan.ddnsgeek.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=familytree.lan.ddnsgeek.com CN: familytree.lan.ddnsgeek.com SAN: familytree.lan.ddnsgeek.com Ciphers: TLS_AES_128_GCM_SHA256 Issuer: /C=US/O=Let's Encrypt/CN=R13 + Platform: Unknown + Start Time: 2026-04-05 07:39:32 (GMT0) --------------------------------------------------------------------------- + Server: gunicorn + [999984] /: Server may leak inodes via ETags, header found with file /, inode: 1775239884.0, size: 1497, mtime: 1563297874. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418 + [999100] /: Uncommon header(s) 'content-disposition' found, with contents: inline; filename=index.html. + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/ + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy ```