In Nikto's focusing tests, which category indicates an authentication bypass vulnerability?

• A. Auth bypass
• B. Software ID
• C. X: Exclude this category making all other categories run
• D. Remote file retrieval

Answer: (A)

Authentication bypass is about accessing restricted areas without providing valid credentials. In Nikto’s focusing tests, the category that explicitly signals this kind of weakness is Auth bypass. It directly represents vulnerabilities where authentication controls can be bypassed, allowing unauthorized access.

The other categories don’t denote this issue. Software ID is simply a signature or version reference and not a security flaw. Exclude this category is a user option to skip that group of tests. Remote file retrieval points to issues around retrieving files from the server, which is a different class of vulnerability and not about bypassing authentication.