VoidRAT
Basic Remote Administration Tool for educational purposes.
- Quiet · last change 6-17-2018
- ★ 10 on GitHub
README
VoidRAT
A basic Remote Administration Tool, for educational purposes. VoidRAT has a Graphical User Interface (for executing tasks remotely), and a Client Console (for local task execution and debugging purposes). It supports custom scripts and delayed executions, advanced and classical tasks. It also has some experimental functions. This project represents the basic mechanisms of modern Remote Administration Tools (RATs, for short), and serves as material for anyone willing to learn about them.
Feature List
| Status | Feature | Requires Admin |
|---|---|---|
 |
Shutdown (with Message) | No |
|
Reboot | No |
|
Sleep/Wake Up (Monitor) | No |
|
Get Network Information | Yes |
|
Get Available WiFi Networks | No |
|
Recover WiFi Profiles | No |
|
Get Running Processes | No |
|
Check if a Process Exists | No |
|
Attempt to Kill a Process | No |
| Enable/Disable Task Manager | Yes | |
| Get Detailed System Information | No | |
| Get the List of Installed Programs | Yes | |
| Recover Saved Passwords | No | |
| Download a File (HTTP) | No | |
| Upload a File (HTTP) | No | |
| Run an Executable | No | |
| Run a Command | No | |
| Update Client | No | |
| Restart Client | No | |
| Uninstall Client | No | |
| Ignore Client | No | |
| Format the System Drive | No | |
| Execute a Script | No | |
| Schedule the Execution of a Script | No | |
| Execute JS | No | |
| Execute VBS | No | |
| Halt All Scripts | No | |
| XMR Mining | No | |
| Floods | No | |
| Keylogging | No | |
| Open a Webpage | No | |
| Change System Volume | No | |
| Play a Sound (WAV) | No | |
| Beep | No | |
| Print a Document | No | |
| Open a File | No | |
| Messagebox | No | |
| Reverse Proxy | No | |
| Remote File Explorer | No | |
| Screenshare | No | |
| Webcam | No | |
| Chat | No | |
| Remote Command Prompt | No | |
| Remote PowerShell | No | |
| System Event Viewer | Yes |
Bug/To-Do List
| Type | Bug/To-Do | Affects | Priority | Status |
|---|---|---|---|---|
| Messagebox does not appear on top | Client | Low | Not Fixed | |
| Webcam module is highly unstable | Client | Medium | Not Fixed | |
| Communication is single-threaded | Client | High | Not Fixed | |
| Random memory leaks | Client | Medium | Not Fixed | |
| The local cursor is not accurate | Client | Low | Not Fixed | |
| Remote File Explorer is generally slow | Server | Low | Not Fixed | |
| The Tasks panel is not updated regularly | Server | Low | Not Fixed | |
| Single Tasks wait for background replies | Server | Medium | Not Fixed | |
| Network Information is not returned | Client | Medium | Not Fixed | |
| No exception mechanism is in place | Client | High | Not Fixed | |
| Admin commands are unstable | Client | Low | Not Fixed | |
| Some arrays are 1-indexed | Server | Low | Not Done | |
| Some loop variables are global | Server | Medium | Not Done | |
| Improve the Remote File Explorer | Server | Low | Not Done | |
| Clean up the Communication unit | Server | Medium | Not Done | |
| Fix the GetParams function | Client | Low | Not Done | |
| Improve persistence | Client | Medium | Not Done | |
| Add the Manifest Cloner | Server | Medium | Not Done | |
| Implement Anti-Debugging code | Client | Medium | Not Done | |
| Implement Process Protection | Client | Medium | Not Done | |
| Finish the Builder | Server | High | Not Done | |
| Add Settings | Server | High | Not Done | |
| Add Statistics | Server | High | Not Done |
Screenshots
Environment and Dependencies
This project was created in Lazarus-IDE, a free cross-platform IDE. Internal Dependencies: BGRAControls, Indy 10, ScrollingText. External Dependencies: avicap32.dll, WinAPI.