Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I'm not exactly sure how metasploit works when exploiting a target machine, and it has been a while since of played with it, so forgive me.
Instead of using meterpreter as a payload in metasploit, could I write my own .Net based executable that would be dropped on a system after exploitation? Assuming the victim had .Net on their machine of course.
You can do this a few different ways.
First, if your exploit is an EXE-dropping exploit (like psexec), you can set the EXE::Custom advanced option.
Otherwise you can use one of the payloads that allows you to upload (windows/upexec/*) or download (windows/download_exec) a custom executable.
