🔐 VAPT Assessment – Week 2

📌 Overview

This repository contains a complete Vulnerability Assessment and Penetration Testing (VAPT) project performed on a Metasploitable2 virtual machine in a controlled lab environment.

The objective of this project was to identify, analyze, and exploit vulnerabilities using industry-standard tools and methodologies.

---

📌 Internship Context

This task was completed as a part of my Vulnerability Assessment and Penetration Testing (VAPT) Internship at Cyart Technologies in March 2026.

---

🎯 Objectives

• Identify open ports and running services
• Detect vulnerabilities in the target system
• Perform exploitation to validate findings
• Analyze risk using CVSS scoring
• Document findings with remediation steps

---

🛠️ Tools Used

• Nmap (Network Scanning)
• Nikto (Web Vulnerability Scanning)
• Metasploit (Exploitation Framework)
• Netcat (Manual Exploitation)

---

🧪 Methodology

The assessment follows the PTES (Penetration Testing Execution Standard):

1. Reconnaissance
2. Scanning
3. Exploitation
4. Post-Exploitation
5. Reporting

---

🔍 Key Findings

• Multiple open ports increasing attack surface
• Outdated and vulnerable services detected
• Insecure protocols like FTP and Telnet enabled
• Successful root access via bind shell (Port 1524)

---

📸 Evidence Included

• Nmap scan results
• Nikto scan results
• Exploitation proof (root access)
• Sensitive file access (/etc/passwd)

---

⚠️ Disclaimer

This project was conducted in a controlled lab environment for educational purposes only. No real systems were targeted.

---

👤 Author

Aditya Mehta
VAPT Intern