Vulnerability assessment (VA) and penetration testing (Pen-Test) are required for security auditing and compliance. Converting VA scan results to be usable in Pen-Test tools is difficult because it must be done at various stages using software tools. This paper describes a system that automatically converts Open Vulnerability Assessment Scanner results into exploitable scripts for Metasploit, an open-source pen-testing program. It targets the top ten vulnerabilities identified by the Open Web Application Security Project and tests them with Metasploit. The system consists of three major components: Scan Result Extraction, which extracts VA scan results related to OWASP 10 vulnerabilities; Target List Repository, which stores vulnerability lists for Metasploit; and Automated Shell Scripts Exploitation, which generates scripts to render the exploit module for execution in Metasploit. The prototype was tested with a variety of scenarios, converting scan results to shell code and rendering them in Metasploit. The experimental results confirmed that the system was functionally correct across all test cases.