In Metasploit, what is the 'Modules' directory responsible for?

• A. It stores user credentials.
• B. It contains a database of known vulnerabilities.
• C. It is the directory that includes exploits and payloads.
• D. It manages user interfaces and plugins.

Answer: (C)

The Modules directory is where Metasploit keeps the actual building blocks it uses to perform attacks: exploit modules that know how to take advantage of a vulnerability, and payload modules that define the code to run after a system is compromised. This is the place the framework loads when you use exploit or payload commands, and you’ll see subfolders for exploits, payloads, encoders, and related module types. It isn’t meant for storing credentials, which live in the framework’s database or loot from sessions, nor is it a simple database of known vulnerabilities or a UI/plugins repository. Those functions come from separate parts of the framework, while the Modules directory specifically houses the exploit and payload code that drives Metasploit’s actions.