Penetration Testing on Metasploitable

Abstract

Penetration Testing is a specialized security auditing method where a tester simulates an attack on the system. The goal of this testing is not to damage the system, but to identify attack surfaces, vulnerabilities, and other security weaknesses from the perspective of an attacker. Besides testing, great care is taken that no system should get damaged .This type of testing involves manual scanning tools like nmap, nikto, wpscan, metasploit and automated vulnerability scanning tools like Nessus. This report first introduces to the steps taken for testing the security of a system and then it shows the attack narrative where the system would be exploited and proof of exploitation would be showed .Lastly, the vulnerabilities would be rated according to their impact on the system and recommendations on each vulnerability would be given.