In Metasploit, which module type is used to perform additional tasks on a compromised host after exploitation?

• A. Exploit
• B. Auxiliary
• C. Payload
• D. Post

Answer: (D)

Post-exploitation tasks on a compromised host are handled by post modules. Once you’ve established a session on the target, post modules run on that system to perform additional actions such as credential collection, privilege escalation, data gathering, pivoting to other hosts, or persistence. This is distinct from exploit modules, which are used to gain access in the first place, and from payloads, which are the code delivered during exploitation to establish that initial session (like a shell or Meterpreter). Auxiliary modules cover non-exploitation tasks such as scanners and fuzzers, which don’t rely on a compromised host. So for doing follow-up actions after exploitation, post modules are the correct choice.