Vulnerability scanning employs automating processes and applications to identify vulnerabilities in
a network system, operating system or application that may be exploitable.
When performed correctly, a vulnerability can deliver an inventory of devices, normal abilities that
have been actively scanned for, and usually a confirmation of how compliant the devices are with various
policies and regulations.
Unfortunately, vulnerability scans are load.
They deliver multiple packets that are easily detected by most network controls and make stealth almost
impossible to achieve.
They also suffer from, for the most important part, a vulnerability.
Scanners are signature based, so they can only detect known vulnerabilities and only if there is an
existing recognition signature that the scanner can apply to the target to a penetration tester.
The most effective scanners are open source, so they load the tester to rapidly modify code to detect
new vulnerabilities.
And also scanners produce large volumes of output, frequently containing false positive results that
can lead a tester astray.
In particular, networks with a different operating systems can produce false positives with a rate
as high as 70%, and scanners may have a negative impact on the network.
They can create a network latency or cause the failure of some devices.
So it's recommended to tweak the scan by removing denial of service type plugins during initial scans
and in certain jurisdictions, scanning is considered hacking and may consider Tuite an illegal act.
And there are multiple commercial and open source products that perform vulnerability scans.