Systems and methods for automated penetration testing

A computer-based method for analyzing computer systems and networks for potential vulnerabilities to cyber-attacks, the method implemented on a penetration testing (“PT”) computer device including at least one processor in communication with at least one memory device, the method comprising:

• receiving, at the processor, scan data from a scan of a target computer device;
• determining, by the processor, a plurality of vulnerabilities of the target computer device based on the-scan data;
• scanning, by the processor, one or more exploit websites to detect a potential exploit based on the plurality of vulnerabilities;
• generating, by the processor, a first exploit based on the plurality of attack vectors and the potential exploit, wherein the first exploit is tailored to attack the target computer device based on the plurality of vulnerabilities;
• and
• executing, by the processor, the first exploit on the target computer device.

At least one non-transitory computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by at least one processor, the computer-executable instructions cause the processor to:

• receive scan data from a scan of a target computer device;
• determine a plurality of vulnerabilities of the target computer device based on the scan data;
• scan one or more exploit websites to detect a potential exploit based on the one or more of the plurality of vulnerabilities;
• generate a first exploit based on the plurality of attack vectors and the potential exploit, wherein the first exploit is tailored to attack the target computer device based on the plurality of attack vectors and the plurality of vulnerabilities;
• and
• execute the first exploit on the target computer device.