```bash nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://gotify.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt" ``` [/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt): ``` - Nikto v2.6.0 --------------------------------------------------------------------------- + Your Nikto installation is out of date. + Target IP: 167.179.167.166 + Target Hostname: gotify.lan.ddnsgeek.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=gotify.lan.ddnsgeek.com CN: gotify.lan.ddnsgeek.com SAN: gotify.lan.ddnsgeek.com Ciphers: TLS_AES_128_GCM_SHA256 Issuer: /C=US/O=Let's Encrypt/CN=R13 + Platform: Unknown + Start Time: 2026-04-05 07:51:15 (GMT0) --------------------------------------------------------------------------- + Server: No banner retrieved + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/ + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy ```