Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications an unpatched security flaws in a computer system?

Nessus is a vulnerability scanner that identifies and reports weaknesses but does not automate exploitation - it performs assessment, not attack execution.

Metasploit is an open-source penetration testing framework developed by Rapid7 that contains a large library of known exploits, payloads, and auxiliary modules targeting specific CVEs, services, and ports. It allows testers to automate attack sequences against unpatched vulnerabilities and supports post-exploitation activities. Its modular architecture makes it the primary tool referenced in security certifications as an exploit framework.

Maltego is an open-source intelligence and link-analysis tool used for reconnaissance and visualizing relationships between entities, not for executing exploits.

Wireshark is a network protocol analyzer used to capture and inspect packets in transit, and has no capability to launch or automate attacks against systems.