I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in the company's network (I have permission from manager).
The manager told me to write a list of exploits I wish to try against the live site, and then he can check before letting me use them.
After doing a complete nmap scan, and clicking find exploits Armitage has given me hundreds of vulnerabilities which could be exploited. If I tried I believe most would NOT work (highly unlikely the site is so vulnerable).
To find a list of exploits which would work there is an option some exploits support called "Check Exploit", this way I can give my manager a list of exploits which the site is vulnerable to.
My question: what actually happens when you check an exploit? I for example don't want to launch an exploit and take down a live site (it would cost me my job!).