What are Stagers in Metasploit payload architecture?

• A. Singles are stand-alone payloads that include all their pieces in one module.
• B. Stagers are payloads loaded into memory first to load the stage and handle communications.
• C. Stagers are a type of vulnerability scanner.
• D. Stagers compress payloads.

Answer: (B)

Staging in Metasploit payloads means using a small initial loader to manage the session and then bring in the larger payload. A stager runs on the target first, establishes the connection back to the attacker, and then downloads or receives the bigger payload (the stage) into memory before transferring control to it. This approach keeps the initial footprint tiny, helps with memory and network constraints, and can aid in evading some defenses by delivering the full capabilities in pieces. The actual powerful functionality comes from the stage (for example, Meterpreter), while the stager’s job is simply to load that stage and handle communications. It’s not a vulnerability scanner, nor is it about compressing payloads or being the stand-alone payload itself.