How do Metasploit exploit and payload modules differ?
They are two names for the same module with identical roles.
An exploit leverages a vulnerability, while a payload is code intended to execute after successful exploitation.
A payload runs only after all post-exploitation work is complete.
An exploit only scans ports, while a payload only encodes files.