An open API service indexing awesome lists of open source software.

https://github.com/m0rd3caii/gorat

This Remote Access Tool (RAT), built with Go, is controlled via a Discord bot. The bot connects to a target machine and allows remote control through Discord commands.
https://github.com/m0rd3caii/gorat

av-bypass av-evasion golang gorat rat remote-access-tool trojan-go trojan-rat windows

Last synced: 3 months ago
JSON representation

This Remote Access Tool (RAT), built with Go, is controlled via a Discord bot. The bot connects to a target machine and allows remote control through Discord commands.

Awesome Lists containing this project

README

          

![GitHub](src/Banner.png)

GoRAT (Go Remote Access Tool) is an extremely powerful yet simple remote administration tool controlled via a Discord bot. The project is still in development, with ongoing work to implement new commands for automating post-exploitation and information gathering.

### Supported Distros:

| 64Bit Distros | 32Bit Distros |
|---------------------|-------------------------------|
| Windows 10,11 | Windows 10,11 |

### Configuration

To configure the project, the user needs to use the setup.exe file to input the bot token and channelID. This file will allow the necessary parameters for the bot to be set up correctly.

Using the `setup.exe` file:
1. Run the `setup.exe` file.
2. Enter the bot token and channelID in the respective fields.
3. Once completed, the setup.exe file will save the configuration and compile the goRAT with the user's Discord bot configuration.

Setup

#### Compiling the setup.exe file manually:
If you prefer to compile the `setup.exe` file yourself, you can do so by running the following command in Go:
```sh
go build -o setup.exe -ldflags "-H=windowsgui" .\config_form\config_form.go
```
This command will compile the project and create the `setup.exe` file, which will allow you to input the `bot token` and `serverID` and then compile the goRAT with the user's Discord bot configuration.

### Using Discord Commands

Once the RAT is executed on a target machine, a private channel is automatically created for each instance. This channel is dedicated to reporting information and activities related to that particular instance of the RAT.

#### Information Reported in the Private Channel:

Every time the RAT is executed, the bot will create a private channel in Discord and report the following details about the target machine:

- **IP Address:** The private IP address of the target machine.
- **User:** The username of the logged-in user on the target machine.
- **Hostname:** The hostname of the target machine.
- **OS:** The operating system running on the target machine.
- **CWD (Current Working Directory):** The current working directory of the target machine.

#### Available Commands:

- `!run {Command Here}`: Execute any command on the target machine. Replace {Command Here} with the desired command you want to run on the target machine .
- `!kill`: This command will stop the RAT and effectively halting the remote session.
- `!password`: This command will retrieve all Google Chrome passwords.

### TODO

- [x] AMSI Patch
- [ ] Upload and Download Files
- [ ] Persistence

### Disclaimer

The use of GoRAT to attack targets without explicit consent is unlawful. It is the responsibility of the end user to comply with all relevant local, state, and federal regulations. We disclaim any liability and are not accountable for any misuse or harm caused by this software. This tool is intended solely for educational purposes and ethical hacking. Several components within this software are governed by their own respective licenses.