Directions: Perform an ethical penetration test on a website of your choice using one of the following tools. As an option, you can use Kali Linux through Oracle Virtual Box.

• Nmap: https://nmap.org/(Links to an external site.) Nmap ("Network Mapper") is a free and open-source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses rawIPpackets to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, and what type of packet filters/firewalls are in use.
• Wireshark:https://www.wireshark.org/(Links to an external site.). Wireshark is a free and open-source protocol analyzer, which will allow a user to capture network traffic or to analyze a capture file.
• Metasploit: https://www.metasploit.com(Links to an external site.)/(Links to an external site.) Metasploit is a framework of tools that allow you to probe systematic vulnerabilities on networks and servers.

Assignment: Give a report detailing the results found by performing a vulnerability scan of a chosen website.

The report should be targeted to an IT audience where you provide:

1. A technical overview of the tool that was used.
2. The name of the target website
3. A listing of the number of vulnerabilities scanned.
4. Important insights you gathered.
5. Examples of the type and how many vulnerabilities were detected.