I like to use metasploit to show people why it is important to stay on top of patches. It kind of hits it home when they see a new admin user with RDP access on their machine.