Skip to main content

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.


How to use the ToRat Docker Image

First of all you type this below command's one by one in your linux terminal.
git clone https://github.com/lu4p/ToRat.git 
cd ./ToRat 
sudo docker build . -t torat 
sudo docker run -it -v "$(pwd)"/dist:/dist_ext torat

Prerequisite's

Install Docker on Linux

How to install?

Clone this repo via git

git clone https://github.com/lu4p/ToRat.git

Change Directory to ToRat

cd ./ToRat

Build the ToRat Docker Container

you need to build a part of the container yourself to get a own onion address and certificate all prerequisites are met by the prebuilt torat-pre image in other to make quick build times possible
sudo docker build . -t torat

Run the container

  • will drop directly into the ToRat Server shell
  • the -v flag copies the compiled binaries to the host file system
  • to connect a machine to the server shell just run one of the client binaries on another system
sudo docker run -it -v "$(pwd)"/dist:/dist_ext torat

In another shell run the client.

sudo chown $USER dist/ -R cd dist/dist/client/ ./client_linux

See the client connect

In your Server shell you should now see something like [+] New Client H9H2FHFuvUs9Jz8U connected! You can now select this client by running select in the Server Shell which will give you a nice interactive chooser for the client you want to connect to. After you choose a client you drop in an interactive shell on the client system.

Current feature

  1. RPC (Remote procedure Call) based communication for easy addition of new functionallity
  2. Automatic upx leads to client binaries of ~6MB with embedded Tor
  3. the ToRAT_client communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)
  • anonymity of client and server
  • end-to-end encryption
  1. Cross Platform reverse shell (Windows, Linux, Mac OS)
  2. Windows:
  • Multiple User Account Control Bypasses (Privilege escalation)
  • Multiple Persistence methods (User, Admin)
  1. Linux:
  • Multiple Persistence methods (User, Admin)
  1. optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP
  • smaller binary ~7MB upx'ed
  • anonymity of client and server
  1. embedded Tor
  2. Unique persistent ID for every client
  • give a client an Alias
  • all Downloads from client get saved to ./$ID/$filename
  1. sqlite via gorm for storing information about the clients
  2. client is obfuscated via garble

Server shell

  1. Supports multiple connections
  2. Welcome Banner
  3. Colored Output
  4. Tab-Completion of:
  • Commands
  • Files/ Directories in the working directory of the server
Command            Info
select                  Select client to interact with
list                       list all connected clients
alias                    Select client to give an alias
cd                        change the working directory of the server
help                     lists possible commands with usage info
exit                      exit the server

Upcoming feature

Credits

GITHUB

Labels:

Comments

Post a Comment

Popular posts from this blog

Sslyze-analyze the SSL configuration of a server by connecting to it

 What is SSLyze? SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. Feature of Sslyze Multi-processed and multi-threaded scanning (it’s fast) SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility Performance testing: session resumption and TLS tickets support Security testing: weak cipher suites, insecure renegotiation, CRIME, Heartbleed and more Server certificate validation and revocation checking through OCSP stapling Support for StartTLS handshakes on SMTP, XMPP, LDAP, POP, IMAP, RDP and FTP Support for client certificates when scanning servers that perform mutual authentication XML output to further process the scan results How to install sslyze Just you type this below command in your terminal this command's will help you to install sslyze on your computer and termux. Linux sudo apt-get install ssl...
Post a Comment
Read more

xprobe2 - A Remote active operating system fingerprinting tool

What is Xprobe2? xprobe2 - A Remote active operating system fingerprinting tool xprobe2 is an active operating system fingerprinting tool with a different approach to operating system fingerprinting. xprobe2 relies on fuzzy signature matching, probabilistic guesses, multiple matches simultaneously, and a signature database. The operation of xprobe2 is described in a paper titled " xprobe2 - A 'Fuzzy ' Approach to Remote Active Operating System Fingerprinting" Option's How to install Xprobe2 First you need to open your terminal after that you type this below command in your terminal this command will help you to install this xprobe2 package. Linux sudo apt install xprobe Termux pkg install xprobe How to use xprobe Just use this below command or see this below image. sudo xprobe2 ( Domain name ) Example's xprobe2 -v -D 1 -D 2 192.168.1.10 Will launch an OS fingerprinting attempt targeting 192.168.1.10. Modules 1 and 2, which are reachability tests, will be di...
Post a Comment
Read more

Root android phone with one click without computer

 What is framaroot? Framaroot is a free android app which can root almost every device in one click without any need of PC/Computer. Framaroot has its own complex exploits which vary from device to device according to its chipset model and android version. In newer versions of Framaroot, you can unroot your android phone in one click too Feature of Framaroot Root android phone with one click Install SuperSu Unroot or execute Advanced user How to Download and install Framaroot First you download framaroot application on your android phone so click this below download button. Now Install it with a file explorer or directly from your internet browser, if android warn you about security risk, say OK and check Unknown sources to allow install of applications outside of Play Store. How to use Open your Framaroot and select one of the following action: Install SuperSU, Unroot or Execute script (for advanced users) Possible case once application is launched A popup saying "Your device see...
1 comment
Read more