[ Thanks to CGISecurity.com for
this link. ]
“How long has Nikto been in development and how many
people are actively working on it?“Although I’ve had patches and updates from a couple of dozen
people (a few of them regularly), I’ve been the sole developer of
Nikto since it’s release in December, 2001.“What are the three biggest challenges that you’ve faced
while developing a web application security scanner from a
developmental perspective?“The biggest challenge, from a technical perspective, is trying
to test and fix bugs against against the huge variety of web
servers in the wild. Even when decent bug reports come in, if I
don’t have access to a Joe-Bob 1.0 server, it’s hard ensure the
problem is resolved…”