I am trying to perform a scanning of a web server using Nikto using:
nikto -id id:pass -h xxx.xxx.xx.xxx
I am specifying HTTP Basic authentication credentials and indeed with this credentials I can log to the IP address I am scanning. So I am expecting result, but instead I am getting the following:
Server: blahblah + The anti-clickjacking X-Frame-Options header is not present. + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type + / - Requires Authentication for realm 'MD5' + No CGI Directories found (use '-C all' to force check all possible dirs) + / - Requires Authentication for realm 'MD5' + / - Requires Authentication for realm 'MD5'
I assumed the problem is with the HTTP credentials, but I am adding the right one. Since Nikto is new to me I cannot really understand what the issue is.
Could you please help me with that?