Ethical hackers attempt to compromise the system on their own while complying by the law in order to assist the business in preventing malicious attacks. Employing the defense-in-depth strategy can help businesses ensure that their information assets are properly safeguarded. Through vulnerability assessments and penetration testing (VAPT), these vulnerabilities are frequently addressed by security professionals from around the world. In order to identify vulnerabilities, the target system’s security posture is assessed using a variety of automated tools as well as manual testing methods including Nmap, netdiscover, and OpenVAS Greenbone. Penetration testing simulates the actions of a malicious attacker trying to take advantage of the target system’s vulnerabilities. Metasploit is one of the Pentest’s tools. The input vector for this stage is the identified set of vulnerabilities from the vulnerability assessment. The efficiency of the security mechanisms present in the target system is evaluated through the VAPT procedure.