Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{184765,
        author = {B Harikeerthana and Ashith Rajeev and B Haritheertha and Muhammed Musthafa and Sr Reema Jose},
        title = {A Systematic Review On Unified Reconnaissance and Vulnerability Assessment},
        journal = {International Journal of Innovative Research in Technology},
        year = {2025},
        volume = {12},
        number = {4},
        pages = {3589-3598},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=184765},
        abstract = {The discussed research centers on the improvement of Vulnerability Assessment and Penetration Testing (VAPT) as a process-oriented technique for identifying and addressing security vulnerabilities in networks, web applications, and operating systems. The focus is on the comparison of open-source and commercial penetration testing tools in terms of detection efficacy, false positive and negative detection, ease of use, scalability, and cost efficiency. Framework-based approaches are brought into the forefront for their potential to deliver organized, repeatable, and compliant test processes that enhance reporting and standardization in enterprise environments. Progress in areas of automation and machine learning is also discussed to facilitate smarter vulnerability detection, intelligent risk prioritization, and minimizing manual effort. Special focus is provided for web application vulnerabilities in line with OWASP Top 10 threats such as SQL injection, cross-site scripting (XSS), insecure session management, and misconfigurations. Experimental studies and case validations prove the usability and effectiveness of these methods in both simulated and real environments. Generally, the results reflect a shift away from solitary testing methods towards total, adaptive, and intelligent VAPT processes that present increased resistance against the ever-changing panorama of cyber-attacks.},
        keywords = {},
        month = {September},
        }