ToRat

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.

Current Features

  • RPC (Remote procedure Call) based communication for easy addition of new functionallity
  • Automatic upx leads to client binaries of ~10MB with embedded Tor
  • the ToRAT_client communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)
    • [x] anonymity of client and server
    • [x] end-to-end encryption
  • Cross Platform reverse shell (Windows, Linux, Mac OS)
  • Windows:
    • Multiple User Account Control Bypasses (Privilege escalation)
    • Multiple Persistence methods (User, Admin)
  • Linux:
    • Multiple Persistence methods (User, Admin)
  • optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP
    • [x] smaller binary ~7MB upx'ed
    • [ ] anonymity of client and server
  • embedded Tor
  • Unique persistent ID for every client
    • give a client an Alias
    • all Downloads from client get saved to ./$ID/$filename
  • sqlite via gorm for storing information about the clients

Server Shell

  • Supports multiple connections
  • Welcome Banner
  • Colored Output
  • Tab-Completion of:
    • Commands
    • Files/ Directories in the working directory of the server
Command Info
select Select client to interact with
list list all connected clients
alias Select client to give an alias
cd change the working directory of the server
help lists possible commands with usage info
exit exit the server

Shell after selection of a client

  • Tab-Completion of:
    • Commands
    • Files/ Directories in the working directory of the client
Command Info
cd change the working directory of the client
ls list the content of the working directory of the client
shred delete files/ directories unrecoverable
shredremove same as shred + removes the shredded files
screen take a Screenshot of the client
cat view Textfiles from the client including .docx, .rtf, .pdf, .odt
alias give the client a custom alias
down download a file from the client
up upload a file to the client
escape escape a command and run it in a native shell on the client
reconnect tell the client to reconnect
help lists possible commands with usage info
exit background current session and return to main shell
else the command will be executed in a native shell on the client

Upcoming Features

GitHub