In Nikto, which option allows scanning on ports other than the default HTTP port (80)?

• A. -h [Target]
• B. -output [Filename]
• C. -vhost [Host Header]
• D. -p [PortList]

Answer: (D)

Scanning on ports other than 80 is controlled by the port-list option. The -p option lets you specify which ports to scan, using a comma-separated list or ranges (for example, -p 8080 or -p 8080,8443). By default, Nikto targets port 80, so providing a port list overrides that to cover non-standard ports as needed. The other options don’t change which ports are scanned: -h sets the target, -output saves results, and -vhost sets a Host header for virtual hosting.