Update XML output template format

[mattburch]

The existing XML output template does not unmarshall successfully due to orphan XML tags. The current output format is similar to the following:

<niktoscan>
  <scandetails>
  </scandetails>
  <niktoscan>
    <scandetails>
    </scandetails>
</niktoscan>

I have updated the template to include a top order XML tag and then to close out the sub niktoscan tag preceeding each completed scandetails section. the update would output the following format:

<niktoscan>
  <niktoscan>
    <scandetails>
    </scandetails>
  </niktoscan
  <niktoscan>
    <scandetails>
    </scandetails>
  </niktoscan>
</niktoscan>

This will unmarshall successfully.

[mattburch]

Have you installed Nikto from your distro repo or installed from source? I have noticed several repositories to not maintain updated Nikto code, including Kali. You can confirm if you have the implemented changes by referenced this pull request against your installed source.

…

On Sat, Apr 1, 2017 at 3:19 AM, Kalaratri ***@***.***> wrote: Hi I'm having trouble with the XML reports. For example a command like this results in an invalid XML file: nikto -p 80 -h file_of_http_hosts.txt -Format XML -o nikto_output_http_hosts.xml When trying to import this into Metasploit I receive this error, which seems relevant to the post here. msf > db_import lnikto_output_http_hosts.xml [*] Importing 'Nikto XML' data [-] Failed to import /nikto_output_http_hosts.xml due to malformed XML: [-] REXML::ParseException: No close tag for /niktoscan/niktoscan/ niktoscan/niktoscan/niktoscan/niktoscan/niktoscan/niktoscan[ 2]/niktoscan/niktoscan/niktoscan/niktoscan/niktoscan/ niktoscan/niktoscan[3]/niktoscan/niktoscan/niktoscan/ niktoscan/niktoscan/niktoscan Line: 4676 Position: 259370 Last 80 unconsumed characters: I've tried checking the XML file with a third party tool, and it too found it was invalid XML Any ideas as to how this could be resolved? Thanks — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#296 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFVqv-JUpjuYwo-pG8kMZ_xqoCUZYxyrks5rrfqPgaJpZM4GURZO> .