The use of advanced communication channels and C2 contact mechanisms in writing malware payloads, the impact of exploits, and demonstrating the security impact of failed security controls or missing patches are discussed for the Metasploit project.