Found
Duration
Date
IP
- Nikto v2.6.0 --------------------------------------------------------------------------- + Target IP: 104.21.35.12 + Target Hostname: hrms.craitrix.com + Target Port: 80 + Platform: Unknown + Start Time: 2026-07-08 07:47:53 (GMT-4) --------------------------------------------------------------------------- + Server: cloudflare + Multiple IPs found: 104.21.35.12, 172.67.167.44, 2606:4700:3037::ac43:a72c, 2606:4700:3032::6815:230c + [999100] /: Uncommon header(s) 'x-turbo-charged-by' found, with contents: LiteSpeed. + [011799] /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc + [999106] /: Cloudflare detected via cf-ray header. Recommend proxying via Burp or mitmproxy to avoid TLS fingerprint blocks. See: https://github.com/sullo/nikto/wiki/Using-a-Proxy + [999986] /server-status: Retrieved x-powered-by header: Next.js. + [000427] /server-status: Link header(s) found with value(s): </_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2". See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Link + [999100] /icons/: Uncommon header(s) 'refresh' found, with contents: 0;url=/icons. + No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped. + [999100] /login: Uncommon header(s) 'x-nextjs-prerender' found, with contents: 1. + [999100] /login: Uncommon header(s) 'x-nextjs-cache' found, with contents: HIT. + [999100] /login: Uncommon header(s) 'x-nextjs-stale-time' found, with contents: 300. + [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy + [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options + [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy + [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + [740000] Multiple index files found (all unique): /index.php5, /index.php4, /index.html, /index.pl, /index.jhtml, /default.aspx, /index.cfm, /index.aspx, /index.php7, /default.asp, /index.php3, /index.asp, /default.htm, /index.cgi, /index.do, /index.xml, /index.php, /index.htm, /index.shtml, /index.jsp. + Scan terminated: 0 errors and 15 items reported on the remote host + End Time: 2026-07-08 07:48:54 (GMT-4) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested