This module moves from information gathering to vulnerability discovery. Learners will use Burp Suite, a leading web application security testing tool, to scan for common vulnerabilities, including those listed in the OWASP Top 10. The module highlights the differences between Burp Suite Community and Professional editions, especially regarding AI-powered features. Learners will practice automated and manual testing using Burp’s Scanner, Intruder, and Repeater tools, and see how AI can prioritize and analyze results.

In this module, learners will leverage AI to automate the exploitation of discovered vulnerabilities and maintain post-exploitation access. The focus is on using Metasploit, a widely used penetration testing framework, in combination with PentestGPT, a specialized AI for cybersecurity. Learners will receive step-by-step guidance for exploiting services such as SSH, creating and deploying payloads, and using advanced features like Meterpreter and msfvenom for custom payload generation.