Meterpreter can be considered an advanced dynamic payload that uses in-memory.
The Dynamic Linked Library (DLL) injection stages at runtime. It also provides a client-side Ruby API that makes it extremely powerful. There are various advantages of using Meterpreter as a payload. Some of these are as follows:
- It resides in the memory and nothing is written to the disk.
- No new process is created as it can easily be injected into any other running processes of the system. However, there's a limitation to it. We can't inject multiple Meterpreter payloads in the same process.
- By default, all communication done by Meterpreter is encrypted.
- New features can be added by uploading the DLL via a client that is loaded in-memory and initialized. ...
