Agent-less Windows System Vulnerability and Network Scanner for Security Assessment and Reporting

Abstract: Modern Windows endpoints and small enterprise networks expose multiple security-relevant services, software versions, configurations, and network paths. Conventional vulnerability assessment approaches may require endpoint agents, extensive deployment, or separate tools for network discovery and host-level inspection. This research presents CyberWolf, an agent-less Windows system vulnerability and network scanner designed to combine network discovery, service enumeration, structured scan-result processing, and rule-based security assessment in a lightweight workflow. The proposed approach uses Nmap for network discovery and XML output as a machine-readable data source, followed by parsing, normalization, security checks, finding prioritization, and report generation. The design is intended for controlled and authorized assessment of Windows hosts without installing a permanent software agent on each target. The research defines a repeatable assessment lifecycle, a normalized data model, example security rules, evaluation dimensions, limitations, and future extensions. The work is positioned as a defensive assessment framework for identifying network-exposed conditions and supporting remediation decisions.

Keywords: Windows Security, Vulnerability Assessment, Agent-less Scanning, Network Discovery, Nmap, CyberWolf, Security Automation, Vulnerability Management