Which Metasploit component establishes a communication channel between the framework and the victim host, enabling file upload/download, screenshots, and password hash collection?

• A. Metasploit Exploit Module
• B. Metasploit Auxiliary Module
• C. Metasploit Payload Module
• D. Metasploit NOPS Module

Answer: (C)

This is about how Metasploit creates a back-channel from the target back to your framework and what enables post-exploitation actions like file transfers, screen capture, and credential dumping. The payload is the piece that runs on the compromised host after exploitation and establishes that session so you can interact with the target from Metasploit. Once the payload is running, it communicates with the framework and provides capabilities such as uploading and downloading files, taking screenshots, and collecting password hashes. Meterpreter is a common payload that embodies these post-exploitation features, giving you robust control over the compromised system through that channel. Other module types don’t create this ongoing communications path: exploits deliver the payload, auxiliary modules perform scanning or data gathering, and the NOPs module is just padding.