Vulnerability scanner with automated penetration testing