Feedback loop for automated vulnerability scanning of hidden network systems

A system comprising:

• a target device;
• and
• a network vulnerability scanning system comprising one or more computing devices configured to:
• scan the target device for vulnerabilities to obtain initial network connection data for the target device via a first network interface of the target device, the initial network connection data identifying an initial network connection between the target device and a first hidden network system;
• install a network scanning application on the target device subsequent to scanning the target device for vulnerabilities to obtain the initial network connection data;
• scan the first hidden network system via the network scanning application installed on the target device;
• and
• subsequent to scanning the first hidden network system, obtain additional network connection data for the target device via the first network interface of the target device, the additional network connection data including an additional network connection between the target device and a second hidden network system.

A non-transitory computer-readable storage medium that includes executable instructions configured to cause one or more computing devices of a network vulnerability scanning system to:

• scan a target device for vulnerabilities to obtain initial network connection data for the target device via a first network interface of the target device, the initial network connection data identifying an initial network connection between the target device and a first hidden network system;
• install a network scanning application on the target device subsequent to scanning the target device for vulnerabilities to obtain the initial network connection data for the target device;
• scan the first hidden network system for vulnerabilities via the network scanning application installed on the target device;
• and
• subsequent to scanning the first hidden network system, obtain additional network connection data for the target device via the first network interface of the target device, the additional network connection data including an additional network connection between the target device and a second hidden network system.