In Metasploit, what are 'Stages'?

• A. Independent payloads that execute without a prior stage.
• B. The stager component that loads the stage into memory.
• C. Stages are payload pieces that implement the functionality of a payload, such as remote shell.
• D. Stages are a type of vulnerability.

Answer: (C)

Stages are the payload pieces that implement the functionality of a payload, such as a remote shell. In Metasploit, a payload is often split into a small initial piece (the stager) that gets loaded first to establish a channel back to the attacker, and a larger stage that contains the actual code the attacker wants to run. The stager loads or downloads this stage into memory, and the stage provides the real capabilities (for example, a shell, Meterpreter, or other remote actions). This separation helps with fitting the payload into memory constraints and avoiding detection, while the stage delivers the full functionality once the session is established.