how to use web vulnerability scanner