Using nmap to pwn security scanners

I was skimming through twitter this morning when a post by the Pentestit.com blog was RT’d by one of the people I’m following. The post was about using nmap to crack passwords for stuff like OpenVAS, NeXpose, etc.