Everyday new web applications are being  developed and used extensively, it is important for  developers and testers to improve application security.  Penetration testing is a technique that helps developers  and testers to ensure that security levels of the web  application are at the acceptable level. It is mandatory  to perform pen testing regularly to avoid potential risks.  Penetration testing is not only restricted to web apps but it  can also be performed on IoT devices, networks, computer  systems, mobile applications, etc. The goal of this tool  is not to cause damage, but instead to identify attack  surfaces, vulnerabilities, and other security weaknesses  from the perspective of an attacker.