I am looking for some way to test the security of my Apache-based web server on Windows Server 2003. I have found that a lot of people use Nikto, but that is for Linux only. I have heard of a program called Wikto, which is something similar for windows. Does anyone have any experience with either of these or know of an alternative that I can use to scan our server from a Windows-based machine? Any help is appreciated.
Thanks,
Paul