Pentestus: A cloud based vulnerability assessment and penetration testing engine

Penetration testing is the practice of testing a computer system, network or web application
to nd security vulnerabilities that an attacker could exploit. Penetration testing
can be automated with software applications or performed manually. Dierent types of
penetration testing include White box testing, black box testing, and grey box testing.
Nowadays, cloud is the preferred solution for data storage, infrastructure, and services.
Most enterprises migrate to the cloud following dierent models as alternatives; public,
private or hybrid and service models of choice SaaS, IaaS or PaaS. Some of the benets
of using cloud-based penetration testing hold scalability, cost-cutting, faster testing, constant
availability etc.
This project is based on developing a cloud based vulnerability assessment and penetration
testing platform where tools with dierent functionalities are integrated together
to provide the client with details about each uncovered vulnerability, including description,
evidence, risk and recommendations for xing it. This project mainly focuses on
Web Application Penetration Testing [WAPT], Network Infrastructure Penetration Testing
usingOpenVAS [NIPT], Mobile Application PenetrationTesting [MAPT] and PCI
DSS Segmentation Testing to provide eectiveness of segmentation controls. Features
of PenTestUS would include quick security assessments, continuous security monitoring,
and discovering attack surface and do passive scans.

MSC CS 2017-2019 INT Dr Tony Thomas