Explain how Metasploit separates an attack vector, an exploit, and a payload. Describe why this separation is useful when configuring an authorized test.

### The concept An **attack vector** is the route by which an attempt reaches a system, for example through a service or application. An **exploit** is the specific method used to take advantage of a weakness on that route. A **payload** is what the exploit delivers or causes to run if it succeeds. Metasploit separates the exploit and payload so that they can be configured as distinct components, although a particular exploit may only support compatible payloads. This modular design helps a tester select a relevant method and a suitable test action without treating them as the same thing. ### What a good answer covers - The vector describes the route or means of reaching a system. - The exploit is the specific method for taking advantage of a weakness. - The payload is the action delivered if the exploit succeeds. - The components can be configured separately, but they must be compatible. - Testing requires authorization and a controlled target. ### Terms - **Attack vector**: The route or means used in an attempt to reach a system. - **Payload**: The action or code delivered through an exploit. - **Module**: A component in the framework that performs a defined function. - **Shell**: A command interface for interacting with an operating system. ### Remember The vector is the route, the exploit is the method, and the payload is the intended action.