Hands-On Red Team Tactics

Meterpreter

Meterpreter can be considered an advanced dynamic payload that uses in-memory.

The Dynamic Linked Library (DLL) injection stages at runtime. It also provides a client-side Ruby API that makes it extremely powerful. There are various advantages of using Meterpreter as a payload. Some of these are as follows:

• It resides in the memory and nothing is written to the disk.
• No new process is created as it can easily be injected into any other running processes of the system. However, there's a limitation to it. We can't inject multiple Meterpreter payloads in the same process.
• By default, all communication done by Meterpreter is encrypted.
• New features can be added by uploading the DLL via a client that is loaded in-memory and initialized. ...