What is the main difference between vulnerability scanning and penetration testing?

answer

The goal of vulnerability scanning is to identify potential weaknesses; the goal of penetration testing is to attack a system.

Vulnerability scanning uses approved methods and tools; penetration testing uses hacking tools.

Vulnerability scanning is performed within the security perimeter; penetration testing is performed outside of the security perimeter.

Vulnerability scanning is performed with a detailed knowledge of the system; penetration testing starts with no knowledge of the system.