What does the Jikto tool do?

• A. A vulnerability scanner for mobile apps.
• B. A series of browser scripts that scan other websites for vulnerable web server content.
• C. A server-side scanner for internal networks.
• D. An automated password cracker.

Answer: (B)

This question tests understanding of how Jikto operates in web security testing. Jikto is a browser-based toolkit made up of multiple scripts that run in your web browser to examine websites for exposed or vulnerable web server content. By loading these scripts on a page, they issue a sequence of HTTP requests to the target site to look for common misconfigurations, default files, outdated components, and other publicly accessible clues that could indicate weaknesses. Because it runs in the tester’s browser, it assesses websites that are reachable from that session rather than performing a full internal-network inventory from a dedicated server, and it isn’t a mobile app scanner or a password-cracking tool.