So, where do Vulnerability Scanners play a part in this? Well, this is where they excel: when you provide the scanner with credentials, then the scanner can log in to the machine and check the client-side software. This is something that we cannot do for the most part in an external test environment.
Before we get into the different scanners that are available within the Kali Linux distributions, we will look at two free tools that we can use for our vulnerability assessment for the internal networks.
The first tool we want to look at is from Microsoft, and it is the Microsoft Baseline Security Analyzer (MBSA). You can download the tool from the following link: http://www.microsoft.com/en-us/download/details.aspx?id=7558
One good thing about the MBSA tool is that it is from Microsoft and it has a pretty good idea on what is missing. It also does a good job of identifying the missing patches and can identify the security...