Which open-source penetration testing platform provides exploit modules and payloads (e.g., Meterpreter) for attack simulation?

• A. Burp Suite
• B. Metasploit Framework
• C. Nikto
• D. Aircrack-ng

Answer: (B)

Open-source platforms that host exploit modules and payloads enable realistic attack simulations. Metasploit Framework is designed for penetration testing and red-team exercises, offering a comprehensive library of exploit modules and associated payloads that can be used to test defenses. A key payload within this framework is Meterpreter, which provides an interactive, feature-rich shell for post-exploitation tasks such as credential dumping, file access, and pivoting. This combination makes Metasploit the go-to choice for simulating attacks across different systems.

In contrast, Burp Suite is focused on web application security testing—intercepting traffic, scanning for web vulnerabilities, and manipulating requests—rather than providing a broad set of exploit modules and payloads. Nikto is a web server vulnerability scanner that identifies issues but does not offer an exploitation framework. Aircrack-ng targets wireless security testing, including cracking credentials, rather than delivering exploitation payloads on compromised hosts. Therefore, the platform that best fits the description is Metasploit Framework.