Can we open closed ports on the site? [on hold]

If we want to find vulnerabilities but all ports are closed, then how to find vulnerabilities