For example, if attackers can detect that a system is running Windows NT 4.0 without service pack 3, they can exploit a number of well-known vulnerabilities. If attackers can locate nis servers and obtain password maps, they can extract encrypted passwords to crack using any resources available to them. Since many people use common words or names as passwords, there is a high probability that at least some encrypted passwords can be cracked. An attacker can use this method to gain unrestricted access to the local disks of an NT workstation. NetWare notification password trap possible - Windows NT 4.0 without Service Pack 3 by default includes a registry entry that points to a .DLL used by NetWare for receiving password updates.
Active ports indicate services in use.
Knowing which services are in use on particular systems helps an attacker know what kinds of attacks to perform and which systems are vulnerable. Shares information on penetration strategy and results across the scan Searches deeper for weaknesses resulting in more thorough assessment Views scan progress in real-time graphical display Generates reports tailored to the audience and in a variety of formats including Word, Excel, and html that you can view with your browser. You can tailor your own custom reports.