In Nikto's focusing tests, which category corresponds to remote file retrieval?

• A. Suspicious file
• B. Auth bypass
• C. Remote file retrieval
• D. Information disclosure

Answer: (C)

Nikto’s focusing tests are grouped by what each test tries to achieve, and one group is dedicated to pulling files from the remote server. The remote file retrieval category encompasses tests that intentionally request files from the server’s filesystem to see if sensitive data can be accessed through misconfigurations, path traversal, or weak permissions. The goal is to determine whether the web server will disclose or expose files it shouldn’t, such as sensitive configuration or log files, by executing crafted requests that attempt to fetch those files. This is distinct from simply discovering that information about the server is available (information disclosure) or from tests that target authentication weaknesses (auth bypass) or search for suspicious filenames (suspicious file). If the server returns the contents of a restricted file in response to a crafted request, that indicates a vulnerability in the remote file retrieval category.