```bash nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://grafana.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt" ``` [/root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt): ``` - Nikto v2.6.0 --------------------------------------------------------------------------- + Your Nikto installation is out of date. + Target IP: 167.179.167.166 + Target Hostname: grafana.lan.ddnsgeek.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=grafana.lan.ddnsgeek.com CN: grafana.lan.ddnsgeek.com SAN: grafana.lan.ddnsgeek.com Ciphers: TLS_AES_128_GCM_SHA256 Issuer: /C=US/O=Let's Encrypt/CN=R13 + Platform: Unknown + Start Time: 2026-04-05 11:50:17 (GMT0) --------------------------------------------------------------------------- + Server: No banner retrieved + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [001736] /login/: This might be interesting. + [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + 7902 requests: 16 errors and 5 items reported on the remote host + End Time: 2026-04-05 12:39:10 (GMT0) (2933 seconds) --------------------------------------------------------------------------- + 1 host(s) tested ```