Testing web servers using auxiliary modules in Metasploit