Payloads and Meterpreter
Post-exploitation shell.
What Is a Payload?
A payload is the code that executes on the target after an exploit succeeds. It defines what you can do next, from running a single command to opening a full interactive shell.
Choosing the right payload depends on the target OS, the network setup, and how much access you need.
Staged vs Stageless
Payloads come in two delivery styles:
- Staged (note the
/inmeterpreter/reverse_tcp): sends a small stub first, which then downloads the full payload. Smaller initial footprint. - Stageless (note the
_inmeterpreter_reverse_tcp): the entire payload is delivered at once. More reliable on flaky networks.
All lessons in this course
- Metasploit Architecture
- Searching and Using Exploits
- Payloads and Meterpreter
- Post-Exploitation Modules