Summary
This chapter examined several packet sniffers, network scanners, and vulnerability scanners. Each of these tools can provide an automated assessment of vulnerabilities that exist on a given computer, web application, or network. Vulnerability scanning can be a preliminary step in identifying attack vectors for a penetration test, or it can be a separate test in and of itself. It is important, however, to keep in mind that a vulnerability scan is not a penetration test.
Cyber threat intelligence can help your penetration testing approach be focused on the current and emerging threats. If you are not aware of the current dangers to a target network, then your penetration test will be, at most, incomplete.
