In Metasploit, which category includes auxiliary scanners like portscan/tcp and portscan/syn?

• A. Post-exploitation modules
• B. Exploit modules
• C. Auxiliary Scanner Modules
• D. Payload modules

Answer: (C)

Scanning and information-gathering tools are grouped under auxiliary modules in Metasploit. Portscan/tcp and portscan/syn are classic examples of scanners that probe a target to discover open ports and services, not code that exploits vulnerabilities or runs after access. Since they’re used for probing rather than gaining or maintaining access, they belong in the Auxiliary Scanner Modules category. Exploits aim to break in, post-exploitation modules run after access is gained, and payloads are the code executed on the target, so those categories don’t fit.