Release Radar

The Nikto 2.6.1 release focuses on scan consistency, safer internals, and a few behavior changes.

SQL Direct Reporting

The new SQL Direct plugin will insert findings directly into a MySQL or PostgreSQL database via the -F sqld output format option. See the wiki docs for setup info.

TLS Keep-Alives

TLS connections now use keep-alives for session reuse. This results in a significant scan speed increase (~18%). Can be disabled if a server misbehaves with -nosslkeepalive.

User-Agent handling

Nikto no longer rotates User-Agents on every request by default. It now uses a static Chrome UA for more stable responses. This reverts to behavior from 2.5.0.

• **`-user...

• Document the YR_RE_SCAN_LIMIT regular expression scan limit (#2223).
• BUGFIX: Bound rule table index in OP_PUSH_RULE and OP_INIT_RULE (#2230).
• BUGFIX: Bound tilde stream row-count read in dotnet module (#2224).
• BUGFIX: Bound repeat stack depth in _yr_re_fiber_sync (#2229).
• BUGFIX: Fix memory leak in yr_rules_load_stream (e13acd3d).
• BUGFIX: Add missing yr_le16toh byte-swapping in pe module (a2ff0db0).
• BUGFIX: Validate summary counts in yr_rules_from_arena (#2222).
• BUGFIX: Cast e_lfanew to int32_t before sign check in pe_get_header (#2228).
• BUGFIX: Bound export name count against 32-bit overflow in pe_parse_exports (#2227).
• BUGFIX: Null-terminate authenticode digest/thumbprint hex buffers in pe module (#2221).
• BUGFIX: Fix string memo...

Pre-release of version 20260720, for testing purposes

New Features

• Added automatic wildcard DNS detection with -auto-wildcard, supporting multiple registrable roots and A/AAAA-based filtering by @Veirt in #966
• Added customizable output templates with -output-template (-ot), including fields such as {{host}}, {{a}}, {{aaaa}}, {{ip}}, and {{query-time}} by @dogancanbakir in #996
• Added query timing through the query-time response field by @Mzack9999 in #968
• Added inline and comma-separated host input support by @dogancanbakir in #895

Bug Fixes

• Fixed JSON and raw output filtering by the requested record type by @dogancanbakir in #988
• Fixed DNS parsing to process only the answer section and ignore unrelated AUTHORITY or ADDITIONAL records by @dogancanbakir in #926
• Improved wildcard-domain validat...

Changelog

• 1571aa17535d8bfcf42258659a141df0b12efa51 Derive release version from git tag; git-- for dev builds (#902)

What's Changed

• Add Debian 13 EOL by @Skorium in https://github.com/CISOfy/lynis/pull/1680
• Add Fedora 43 EOL date by @pointydev in https://github.com/CISOfy/lynis/pull/1679
• Add AlmaLinux to EOL DB by @vofy in https://github.com/CISOfy/lynis/pull/1678
• Add EOL date for Alpine 3.22 by @kolenichsj in https://github.com/CISOfy/lynis/pull/1677
• Add openSUSE Leap to EOL DB by @mnhauke in https://github.com/CISOfy/lynis/pull/1682
• Fix OS detection for CachyOS (ID=cachyos) by @cycloarcane in https://github.com/CISOfy/lynis/pull/1683
• Add CachyOS to OS end-of-life database by @cycloarcane in https://github.com/CISOfy/lynis/pull/1684
• Update software-eol.db by @Linus-Linux in https://github.com/CISOfy/lynis/pull/1686
• Update RHEL 8 EOL and add RHEL 9 and 10 dates to software-e...

This is a bug and security fix release.

What's Changed

Fixes

• Fix heap buffer overflow in Windows processes table by @seph in https://github.com/osquery/osquery/pull/8934
• Fix heap buffer overflow in Windows authenticode table by @seph in https://github.com/osquery/osquery/pull/8923
• Fix use-after-free in Linux process_file_events implementation by @zwass in https://github.com/osquery/osquery/pull/8950
• Fix incorrect permissions on temporary file carve directories by @zwass in https://github.com/osquery/osquery/pull/8961
• Fix documentation for process_open_handles table by @seph in https://github.com/osquery/osquery/pull/8853
• Fix subject2 and issuer2 columns for Windows certificates table by @getvictor in https://github.com/osquery/osquery/pull/896...