Types of vulnerability scanners

Types of vulnerability scanners

Host-based scanner:

Tools are used to identify and diagnose the issues in the host or the system. These tools load a mediator software onto the target system which traces the event and reports it to the security analyst.

Examples: Cain and Abel,STAT, Metasploit

Network-based scanner:

Used to detect vulnerabilities on the network being used. It does so by scanning all the open ports and identifying the services running on those ports, the tools then disclose the possible risk associated with these services.

Examples: Wireshark, Nmap, Nessus

Database-based:

Used to prevent exploitation by SQL injection by the use of various tools and techniques in order to identify security exposure in database systems of the application being tested.