A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.
Work in Progress...
Setup
Repository
The important parts live in
Current Features
- the ToRAT_client communicates over TCP(with TLS) proxied through Tor with the ToRat_server (hidden service)
- anonymity of client and server
- end-to-end encryption
- Cross Platform reverse shell (Windows, Linux, Mac OS)
- Windows:
- Multiple User Account Control Bypasses (Privilege escalation)
- Multiple Persistence methods (User, Admin)
- Linux:
- Multiple Persistence methods (User, Admin)
- optional transport without Tor
- smaller binary
- anonymity of client and server
- embedded Tor
- Unique persistent ID for every client
- give a client an Alias
- all Downloads from client get saved to ./$ID/$filename
Server Shell
- Supports multiple connections
- Colored Output
- Tab-Completion of:
- Commands
- Files/ Directories in the working directory of the server
| Command | Info |
|---|---|
| select | Select client to interact with |
| list | list all connected clients |
| alias | Select client to give an alias |
| cd | change the working directory of the server |
| exit | exit the server |
Shell after selection of a client
- Tab-Completion of:
- Commands
- Files/ Directories in the working directory of the client
| Command | Info |
|---|---|
| cd | change the working directory of the client |
| ls | list the content of the working directory of the client |
| shred | delete files/ directories unrecoverable |
| shredremove | same as shred + removes the shredded files |
| screen | take a Screenshot of the client |
| cat | view Textfiles from the client including .docx, .rtf, .odt |
| alias | give the client a custom alias |
| down | download a file from the client |
| up | upload a file to the client |
| escape | escape a command and run it in a native shell on the client |
| reconnect | tell the client to reconnect |
| exit | background current session an return to main shell |
| else | the command will be executed in a native shell on the client |
Upcoming Features
- Privilege escalation for Linux
- Persistence and privilege escalation for Mac OS
- Support for Android and iOS
- Cat with support for .pdf files
- File-less Persistence on Windows
- ASCII-Art Welcome Message in server shell
DISCLAIMER
USE FOR EDUCATIONAL PURPOSES ONLY
Contribution
All contributions are welcome you don't need to be an expert in Go to contribute.