Which of the following Metasploit module types would contain scanning capabilities?

Auxiliary modules in Metasploit are designed for tasks that support an attack without delivering a payload, including port scanning, service enumeration, vulnerability scanning, and credential brute-forcing. They are invoked with 'use auxiliary/<module>' and do not require a payload to run.

Exploit modules are designed to take advantage of a specific vulnerability to gain access to a target system, not to perform scanning or reconnaissance.

Post modules run after a session is established to perform post-exploitation tasks such as privilege escalation or lateral movement, not initial scanning.

Payload modules define the code that runs on a target after a successful exploit and are paired with exploit modules, not used independently for scanning.