Automatic vulnerability assessment tool