Determining vulnerability of target hosts

A vulnerability scan (often referred to as a network-based scan) can be done remotely. The method for running a scan directly on a host is named a host-based scan. Only determining the application version does not always help us to find vulnerabilities to crack the system. It is also very important to detect an OS version to combine results. From time to time, operating system updates are released, and they do patching for an application without even changing the application version. Finding a vulnerability with a remote scan is a bit difficult, as results might become false positive.