Cybersecurity · hands-on lab
Kali Lab 05: nikto and openssl — Web and TLS Checks
Scan a web server with nikto and inspect a TLS certificate with openssl; spot a weak, self-signed cert.
- 40 minutesTime in the lab
- intermediateLevel
- 3 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Tools: nikto + openssl. Assess the web service on target: run nikto for common issues, and use openssl to inspect its HTTPS certificate — which is self-signed and weak.
What you will do
- Scan the web server
- Inspect the TLS certificate
- What is wrong with this certificate?question
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.