- Nikto v2.1.6/2.1.5 + Target Host: 10.10.10.75 + Target Port: 80 + GET The anti-clickjacking X-Frame-Options header is not present. + GET The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS + GET The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type + HEAD Apache/2.4.18 appears to be outdated (current is at least Apache/2.4.37). Apache 2.2.34 is the EOL for the 2.x branch. + GET Server may leak inodes via ETags, header found with file /, inode: 5d, size: 5616c3cf7fa77, mtime: gzip + OPTIONS Allowed HTTP Methods: POST, OPTIONS, GET, HEAD + OSVDB-3233: GET /icons/README: Apache default file found.