I think before you just start going through tools, you should map out your plan for the demonstration. As you're using Metasploit ...

Intelligence Gathering
Steps X,Y,Z
Threat model X,Y,Z
Known/Discovered Vulnerabilites X,Y,Z
Exploitation (your Proof of concept) QED

Showing your boss a detailed plan and how you obtained the results would be more beneficial than what has been listed so far. Also, I'd be very careful if this is on a production box. Work in non-prod regions of SDLC if possible.