https://github.com/hacefresko/JavaRAT

Windows RAT written in Java for learning purposes
https://github.com/hacefresko/JavaRAT

backdoor backdoors java jrat powershell-session rat

Last synced: about 2 months ago
JSON representation

Windows RAT written in Java for learning purposes

• Host: GitHub
• URL: https://github.com/hacefresko/JavaRAT
• Owner: hacefresko
• Archived: true
• Created: 2020-04-12T15:46:50.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2021-04-08T10:27:23.000Z (over 3 years ago)
• Last Synced: 2024-07-29T01:34:52.975Z (about 2 months ago)
• Topics: backdoor, backdoors, java, jrat, powershell-session, rat
• Language: Java
• Homepage:
• Size: 1.81 MB
• Stars: 23
• Watchers: 3
• Forks: 6
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# JRAT

Set of fake Java applications with hidden backdoors made to learn about socket programming and backdoors.

Each application triggers a reverse shell when executed, opening a PowerShell session. It also allows transfering files in both directions (use help command for more info). It only supports one connection at a time.

None of the applications is blocked by WindowsDefender



## Applications

* RAW: Just the backdoor, without any masking application

* CSGOHacks: Fake application to gain cheats for the game "Counter Strike: Global Offensive"

* KeyGen: Fake key generator for some programs from the Adobe Suite

* YoutubeMP3: Fake YouTube to mp3 converter







## Usage

* The attacker must run the Attacker project launched from launcher/main.java. It will create a server listening by default on port 5123 (this can be easily changed in main.java).

* The application for the victim must be configured by specifying the attacker's IP and port. Then, it must be packed into a .jar file. I recommend using any application to convert the .jar to .exe such as Launch4j, although the vicitm still needs to have Java installed. When the victim executes the application, it will connect to the attacker's machine and will open the PowerShell session.

## Disclaimer

This tool was written for learning purposes. Its usage against infrastructures without the consent of the owner can be considered as an illegal activity. Authors assume no liability and are not responsible for any misuse or damage caused by this program.