Hi,

Good article. I'd like to add that script selection comes in handy when running several scripts. For example:

nmap -p80 --script "http-* and (not(http-brute or http-slowloris))"

I recommend running http-enum if working with web servers. The signatures are more up to date than nikto's.

Cheers.