What are the tasks performed by online vulnerability scanner? Does it detect errors in web server configuration? What type of scan can be done using this scanner?
The vulnerability scanner is used to check the SSL certificate, security of the HTTP cookies, scan for security configuration; it can detect web server configuration errors, and check for known script vulnerability. Two types of scan are done; they are quick scan and full scan. The full scan generates disturbances in the network which will be seen as attack traffic by the IDSs. Proper authorization is a must for performing this type of scan.
