Exploit frameworks provide structured platforms for exploitation: Metasploit (most widely used, open source, 2000+ modules), Core Impact (commercial), Canvas (commercial).
Metasploit workflow: search (find exploit) → use (select module) → show options → set RHOSTS/LHOST/LPORT → run. Meterpreter = feature-rich in-memory payload. Always verify scope before running exploits — mistakes can crash production systems.