- meterpreter - many more advanced commands - in-memory process migration - disable/enable user input - check remote idle time - pivot through hosts - interact with processes, threads, files, and the registry - msfconsole - multiple concurrent sessions - session backgrounding - exploit backgrounding - multiple concurrent exploits - especially useful for passive exploits, like clientside bugs