RAT

250+ 开源远控/C&C工具，1200+ RAT分析报告\C&C相关文章等。
English Version

开源工具

pupy

[5265星][1m] [Py] n1nj4sec/pupy Python编写的远控、后渗透工具，跨平台（Windows, Linux, OSX, Android）

Covenant

[1147星][6d] [C#] cobbr/covenant Covenant is a collaborative .NET C2 framework for red teamers.
[95星][9d] [C#] cobbr/elite Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
[31星][4m] [C#] cobbr/c2bridge C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.

Slackor

[332星][12d] [Py] coalfire-research/slackor A Golang implant that uses Slack as a command and control server

QuasarRAT

[2932星][10m] [C#] quasar/quasarrat Remote Administration Tool for Windows

EvilOSX

[1376星][2y] [Py] marten4n6/evilosx An evil RAT (Remote Administration Tool) for macOS / OS X.

Merlin

[2568星][6m] [Go] ne0nd0g/merlin Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

商业软件

Team Viewer

[405星][2y] [C++] vah13/extracttvpasswords tool to extract passwords from TeamViewer memory using Frida
[277星][2y] [C++] gellin/teamviewer_permissions_hook_v1 A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
[175星][9d] uknowsec/sharpdecryptpwd 对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。
[59星][2y] [Py] attackercan/teamviewer-dumper 从内存中转储TeamViewer ID 和密码
[42星][6d] [C#] v1v1/decryptteamviewer Enumerate and decrypt TeamViewer credentials from Windows registry
[36星][5y] [C++] kkar/teamviewer-dumper-in-cpp Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
[25星][5m] [C++] dydtjr1128/remoteassistance-cpp [WIP]RemoteAssistance like TeamViewer(C++)

恶意软件(部分)

Gh0st

[301星][7d] [C++] yuanyuanxiang/simpleremoter 基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能
[273星][7y] [C++] sin5678/gh0st a open source remote administrator tool
[91星][6y] [C++] igh0st/gh0st3.6_src
[90星][1m] [C++] zibility/remote 参考Gh0st源码，实现的一款PC远程协助软件，拥有远程Shell、文件管理、桌面管理、消息发送等功能。
[21星][5m] [C++] holmesian/gh0st-light 精简之后的老东西

NanoCore

[2星][10m] [Py] jacobpimental/nanocore_extractor Extracts nanocore sample from compile AutoIT script

NjRat

[143星][2y] [Visual Basic .NET] alibawazeeer/rat-njrat-0.7d-modded-source-code NJR
[128星][8d] [Visual Basic] mwsrc/njrat njRAT SRC Extract
[14星][5m] [C#] nyan-x-cat/njrat-0.7d-stub-csharp njRAT C# Stub - Fixed For PowerShell
[3星][2y] [Py] seep1959/njutils A client and chat program for njrat 0.6.4, 0.7d, and 0.7d golden edition.

Revenge RAT

[21星][2m] [C#] nyan-x-cat/revengerat-stub-cssharp Revenge-RAT C# Stub - Fixed

PlugX

[28星][7y] [Py] kcreyts/plugxdecoder Decodes PlugX traffic and encrypted/compressed artifacts

RemcosRAT

L0rdixRAT

LodaRAT

2020.02 [talosintelligence] Loda RAT Grows Up

GulfRAT

NetWireRAT

JhoneRAT

Dacls

BlackRemote

Orcus

NukeSped

DarkComet

WarZone RAT

BlackShades

DenesRAT

WSH RAT

Qrypter RAT

Adwind

CannibalRAT

2018.02 [talosintelligence] CannibalRAT targets Brazil

jRAT

jsRAT

CrossRat

ArmaRat

RokRAT

CatKARAT

TheFatRat

OmniRAT

LuminosityLink

其他

利用公开服务

[648星][1y] [Py] mehulj94/braindamage 使用Telegram做C&C服务器的远控
[330星][8m] [Py] mvrozanti/rat-via-telegram Windows Remote Administration Tool via Telegram
[160星][4y] [Py] blazeinfosec/bt2 使用Telegram 基础设施做C&C 服务器

Twitter

[658星][4y] [Py] paulsec/twittor A fully featured backdoor that uses Twitter as a C&C server
[186星][3y] [Go] petercunha/goat a trojan created in Go, using Twitter as a the C&C server

GMail

[1117星][1y] [Py] byt3bl33d3r/gcat A PoC backdoor that uses Gmail as a C&C server
[353星][3y] [Py] maldevel/gdog Python 编写的后门，使用 Gmail 做 C&C
[22星][1y] [Py] pure-l0g1c/keylogger A simple keylogger that uses Gmail as a C&C

Github

[179星][3y] [Py] maldevel/canisrufus Python 编写的后门，使用 Github 做 C&C

DropBox

[134星][1y] [Py] 0x09al/dropboxc2c DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

区块链

[46星][1y] [Go] xpn/blockchainc2 A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
[35星][3m] [Py] geek-repo/c2-blockchain This is a concept poc of command and control server implemented over blockchain

其他

[513星][1y] [Go] mthbernardes/gtrs 使用Google翻译器作为代理将任意命令发送到受感染的计算机
[102星][4m] [Py] nccgroup/gitpwnd 网络渗透测试工具，可使攻击者向被攻击机器发送命令，并使用 git repo 作为 C&C 传输层接收结果
[97星][2y] [Py] arno0x/webdavc2 A WebDAV PROPFIND C2 tool
[93星][2y] [PS] bkup/slackshell PowerShell to Slack C2
[84星][2y] [Go] 0x09al/browser-c2 Post Exploitation agent which uses a browser to do C2 operations.
[69星][13d] [Py] itskindred/redviper redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
[66星][2y] [Py] lukebaggett/google_socks A proof of concept demonstrating the use of Google Drive for command and control.
[29星][2y] [Py] ajinabraham/xenotix-xbot Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C
[26星][3y] [Py] dsnezhkov/octohook Git Web Hook Tunnel for C2
[23星][10d] [PS] netspi/sqlc2 SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
[22星][2y] [Py] woj-ciech/social-media-c2 Script is a proof of concept how to control your machine by using social media sites.
[16星][10d] [Py] securemode/trelloc2 Simple C2 over the Trello API
[14星][1y] [Py] j3ssie/c2s Command and Control server on Slack
[8星][2y] [Py] maldevel/dicerosbicornis A fully featured Windows backdoor that uses email as a C&C server
[7星][3y] [Py] killswitch-gui/flask_appengine_redirector Google App Engine Flask C2 redirector

通信协议

DNS协议

[318星][1m] [Py] baderj/domain_generation_algorithms 域名生成算法
[220星][17d] [Scala] sotera/spark-distributed-louvain-modularity Spark / graphX implementation of the distributed louvain modularity algorithm
[209星][3y] [Py] endgameinc/dga_predict Predicting Domain Generation Algorithms using LSTMs
[132星][2m] [Py] andrewaeva/dga The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
[117星][6m] [Py] 360netlab/dga Suspicious DGA from PDNS and Sandbox.
[49星][2y] [java] toufikairane/andromalware Android Malware for educational purpose
[40星][4y] [Py] pchaigno/dga-collection A collection of known Domain Generation Algorithms
[31星][4y] [Py] endgameinc/sans_thir16 SANS Hunting on the Cheap
[31星][3y] [Py] staaldraad/fastfluxanalysis Scripts to detect Fast-Flux and DGA using DNS query responses
[28星][2y] [Py] philarkwright/dga-detection DGA Domain Detection using Bigram Frequency Analysis
[13星][3y] [Py] cisco-talos/goznym
[6星][1y] [Py] matthoffman/degas DGA-generated domain detection using deep learning models
[4星][3m] [PHP] navytitanium/eitest-tools-scripts-iocs
[1星][2m] [Py] bkcs-hust/lstm-mi A LSTM based framework for handling multiclass imbalance in DGA botnet detection

[1855星][8m] [C++] iagox86/dnscat2 在 DNS 协议上创建加密的 C&C channel
[832星][6d] [Go] bishopfox/sliver 一个通用的跨平台植入程序框架，该框架C3支持Mutual-TLS，HTTP（S）和DNS
[386星][4y] [Py] ahhh/reverse_dns_shell 使用DNS作为c2通道的python反向shell
[277星][1y] [Py] trycatchhcf/packetwhisper Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
[276星][4m] [Go] sensepost/godoh A DNS-over-HTTPS Command & Control Proof of Concept
[225星][2y] [PS] lukebaggett/dnscat2-powershell A Powershell client for dnscat2, an encrypted DNS command and control tool.
[176星][2y] [C++] 0x09al/dns-persist DNS-Persist is a post-exploitation agent which uses DNS for command and control.
[41星][2m] [Erlang] homas/ioc2rpz ioc2rpz is a place where threat intelligence meets DNS.
[38星][2m] [JS] inquest/threatkb Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

ICMP

WebSocket

[245星][2y] [Py] arno0x/wsc2 A WebSocket C2 Tool
[131星][9d] [C++] xorrior/raven CobaltStrike External C2 for Websockets

C&C

Cobalt Strike

[462星][2y] rsmudge/malleable-c2-profiles Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
[217星][2y] [Py] bluscreenofjeff/malleable-c2-randomizer A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
[195星][1y] [PS] qax-a-team/cobaltstrike-toolset Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
[188星][2y] [C#] ryhanson/externalc2 A library for integrating communication channels with the Cobalt Strike External C2 server
[165星][6m] threatexpress/malleable-c2 Cobalt Strike Malleable C2 Design and Reference Guide
[160星][11d] [Py] threatexpress/cs2modrewrite Convert Cobalt Strike profiles to modrewrite scripts
[146星][2y] [Py] und3rf10w/external_c2_framework Python api for usage with cobalt strike's External C2 specification
[105星][5m] xx0hcd/malleable-c2-profiles Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
[67星][2y] [C] outflanknl/external_c2 POC for Cobalt Strike external C2
[56星][24d] 1135/1135-cobaltstrike-toolkit about CobaltStrike
[55星][1y] [Py] truneski/external_c2_framework Python api for usage with cobalt strike's External C2 specification
[41星][3y] bluscreenofjeff/malleablec2profiles Malleable C2 profiles for Cobalt Strike
[41星][2y] [Go] empty-nest/emptynest 基于插件的 C2 服务器框架。其目标不是取代某些强大的工具（例如 Empire、Metasploit、CobaltStrike），而是创建一个支持框架，以便为自定义 agents 快速创建小型、专用的 handlers
[12星][5m] [TS] hattmo/c2profilejs Web UI for creating C2 profiles for Cobalt Strike

工具

[1135星][13d] [Boo] byt3bl33d3r/silenttrinity An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
[614星][12d] [Py] trustedsec/trevorc2 通过正常的可浏览的网站隐藏 C&C 指令的客户端/服务器模型，因为时间间隔不同，检测变得更加困难，并且获取主机数据时不会使用 POST 请求
[575星][3m] [PS] nettitude/poshc2_old Powershell C2 Server and Implants
[478星][5m] [C++] fsecurelabs/c3 一个用于快速定制C2通道原型的框架，同时仍提供与现有攻击性工具包的集成。
[442星][3y] [CSS] graniet/chromebackdoor 一个渗透测试工具PoC，使用MITB技术在启动后生成Windows可执行文件“ .exe”，并在大多数流行的浏览器上运行恶意扩展或脚本，并通过C&C发送所有DOM数据。
[336星][12d] [PS] nettitude/poshc2 Python Server for PoshC2
[325星][1y] [C#] spiderlabs/dohc2 DoHC2 allows the ExternalC2 library from Ryan Hanson (
[273星][4m] [Py] felixweyne/imaginaryc2 辅助对恶意软件进行行为（网络）分析，python
[205星][3y] [Py] countercept/doublepulsar-c2-traffic-decryptor 处理PCAP文件，解密发送到DOUBLEPULSAR implant的C2流量
[186星][2y] [Py] woj-ciech/daily-dose-of-malware Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
[155星][7d] [Py] chrispetrou/hrshell HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
[136星][2y] [Py] pjlantz/hale Botnet command & control monitor
[132星][10m] [C] treehacks/botnet-hackpack Build a basic Command & Control botnet in C
[130星][6d] [Py] mhaskar/octopus Open source pre-operation C2 server based on python and powershell
[125星][7d] [JS] p3nt4/nuages A modular C2 framework
[99星][6d] [Py] ziconius/fudgec2 FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
[83星][5y] [Py] maldroid/maldrolyzer Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
[79星][9m] [C++] watersalesman/aura-botnet A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
[70星][14d] [Py] angus-y/pyiris-backdoor a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems.
[68星][1m] [C#] maraudershell/marauder A .NET agent for the Faction C2 Framework
[67星][5m] [HTML] project-prismatica/prismatica Responsive Command and Control System
[58星][1y] [C#] mdsecactivebreach/browser-externalc2 External C2 Using IE COM Objects
[56星][2y] [Go] averagesecurityguy/c2 A simple, extensible C&C beaconing system.
[48星][3m] [Shell] professionallyevil/c4 Cyberdelia, a Collection of Command and Control frameworks
[44星][30d] [JS] shadow-workers/shadow-workers C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
[41星][2y] [Py] v1v1/sleight Empire HTTP(S) C2 redirector setup script
[39星][1y] [PS] outflanknl/doh_c2_trigger Code for blogpost:
[38星][12d] [C#] sf197/telegra_csharp_c2 Command and Control for C# Writing
[37星][11m] [Go] prsecurity/golang_c2 Boilerplate C2 written in Go for red teams
[31星][16d] [Py] qsecure-labs/overlord Overlord - Red Teaming Infrastructure Automation
[30星][6y] [PS] enigma0x3/powershell-c2
[24星][1y] prsecurity/neutrino Neutrino C2 Source Code
[23星][25d] [Go] audibleblink/bothan Is this IP a C2 server?
[19星][1y] tevora-threat/rt_redirectors Ansible role to configure redirectors for red team C2
[18星][5y] [PS] et0x/c2 Methods of C2
[18星][1m] [Py] marcorosa/cnc-botnet-in-python C&C Botnet written in Python with fabric
[17星][1y] [C] kiwidoggie/oni-framework Embedded systems C2 software written in C/C#
[17星][3y] [Go] pandipanda69/my-little-honeypot This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control.
[17星][4m] stvemillertime/absolutely-positively-not-hacking-back-with-pcap Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control Nodes
[16星][4y] [Py] hasherezade/bunitu_tests Scripts for communication with Bunitu Trojan C&Cs
[16星][6m] [C] blacchat/xzf EXIF-based command and control PoC
[16星][10m] [Py] daniel-infosec/wikipedia-c2 POC for utilizing wikipedia API for Command and Control
[14星][5y] [Py] nocow4bob/pix-c2 Ping Exfiltration Command and Control (PiX-C2)
[14星][3y] [Py] secarmalabs/indushell PoC C&C for the Industroyer malware
[14星][5m] [C#] immersive-command-system/immersivedroneinterface aerial vehicle command and control platform, designed for immersive interfaces (such as the Oculus Rift).
[11星][4m] [Py] jacobsoo/amtracker Android Malware Tracker
[10星][12m] [Dockerfile] d3vzer0/cnc-relay Docker projects to retain beacon source IPs using C2 relaying infra
[10星][9m] [Py] m8r0wn/transportc2 PoC Command and Control Server. Interact with clients through a private web interface, add new users for team sharing and more.
[10星][3y] [Py] r3mrum/loki-parse A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc...
[9星][4m] [Py] degenerat3/meteor Cross-platform C2 with modules for TCP, web, and more soon to come
[8星][2m] [Py] jacobsoo/malconfig This is part of a module for the framework that i'm constantly developing. Currently only information of the C2 are disclosed here.
[8星][3y] [Py] killswitch-gui/flask_heroku_redirector flask heroku C2 redirector template
[8星][5m] [Py] r00k5a58/pyc2 simple c2 written in python to demonstrate security concepts
[8星][11m] tothi/kali-rpi-luks-crypt Full disk encryption for Kali on Raspberry using LUKS
[8星][25d] [Go] xorrior/apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload
[7星][3y] [PS] 0sm0s1z/invoke-selfsignedwebrequest This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with the hack!
[6星][2y] [C#] jaydcarlson/c2-printf 通过 Silicon Labs C2 调试器连接打印跟踪消息
[6星][5m] [Py] m507/m-botnet A C2 project that controls a self-propagating MS17-010 worm.
[5星][3y] [Py] killswitch-gui/flask_pythonanywhere_redirector flask pythonanywhere C2 redirector template
[4星][3y] [Py] mellow-hype/c2finder Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
[4星][2y] [PHP] nao-sec/ramnit_traffic_parser Parsing Ramnit's traffic
[3星][23d] [C++] lima-x-coding/win32.-d0t-nix.c2 A C/C++ recreation off the original Win32.VB.Illerka.C Virus by Michael [APFX]
[0星][2y] [Py] bizdak/silverboxcc Reverse engineered android malware, and this is a C&C server for it
[0星][2y] boaxboax/ctf-quaorar

文章

远控

工具

[1615星][9d] [Py] zerosum0x0/koadic 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit，区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
[1473星][3y] [Py] nathanlopez/stitch 一个跨平台的远控框架，可为Windows，Mac OSX和Linux构建自定义的Payload
[789星][4m] [Py] kevthehermit/ratdecoders Python Decoders for Common Remote Access Trojans
[764星][7d] [C] rdesktop/rdesktop rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
[706星][1y] [PS] arvanaghi/sessiongopher 使用WMI为远程访问工具（如WinSCP，PuTTY，SuperPuTTY，FileZilla和Microsoft远程桌面）提取保存的会话信息。PowerShell编写
[538星][10d] [JS] mr-un1k0d3r/thundershell 通过HTTP请求进行通信的C＃RAT
[392星][5m] [C++] werkamsus/lilith 基于C ++开发的基于控制台的超轻量RAT
[297星][2y] [Py] 0xislamtaha/python-rootkit Python远控，用于获取Meterpreter会话
[238星][6d] [C#] b4rtik/redpeanut RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
[222星][9d] [C++] xdnice/pcshare 远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。
[214星][2y] [C#] them4hd1/vayne-rat 用C＃编码的免费和开源远程管理工具。
[205星][2y] [C++] ahxr/ghost a light RAT that gives the server/attacker full remote access to the user's command-line interprete
[201星][10d] [Py] pure-l0g1c/loki 远程访问工具，使用 RSA-2048 + AES-256 保护通信安全
[195星][3m] [PHP] 0blio/caesar 基于HTTP的RAT，从浏览器远程控制设备
[175星][4y] [C#] alphadelta/secure-desktop Anti-keylogger/anti-rat application for Windows
[172星][3y] [C++] hussein-aitlahcen/blackhole C# RAT (Remote Administration Tool)
[157星][10d] [Visual Basic] mwsrc/plasmarat Remote Access Trojan(RAT), Miner, DDoS
[140星][1m] [Py] anhkgg/pyrat 基于python XmlRPC完成的远控开源项目，包括客户端和服务端（也叫控制端，后统称服务端）
[136星][25d] [C++] earthquake/universaldvc Universal Dynamic Virtual Channel connector for Remote Desktop Services
[129星][2y] [Py] dviros/rat-via-telegram 使用Telegram控制已经攻克的Windows主机
[115星][4y] [C#] leurak/trollrat 远程管理工具（RAT），该工具采用与其他RAT不同的方法，不做数据窃取等，只是为了trolling
[98星][4m] [JS] securityrat/securityrat OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
[95星][7y] [C#] ilikenwf/darkagent DarkAgent Remote Administration Tool RAT by DragonHunter
[95星][2y] [Pascal] senjaxus/allakore_remote Delphi Seattle编写的远控
[80星][4y] [C++] rwhitcroft/dnschan 使用DNS通信的远程访问木马
[77星][4y] [Py] ahhh/reverse_https_bot A python based https remote access trojan for penetration testing
[66星][11d] [Visual Basic] thesph1nx/rt-101 VB.net Remote Administrator Tool (RAT)
[65星][7m] sh1n0g1/shinobot RAT / Botnet Simulator for pentest / education
[61星][28d] [Visual Basic] thesph1nx/slickermaster-rev4 NSA Hacking Tool Recreation UnitedRake
[61星][2m] [C#] nyan-x-cat/mass-rat Basic Multiplatform Remote Administration Tool - Xamarin
[58星][3y] [PS] killswitch-gui/persistence-survivability Powershell Persistence Locator
[57星][3y] [Py] m4sc3r4n0/spyrat Python Remote Access Trojan
[55星][4y] [Py] ahhh/ntp_trojan Reverse NTP remote access trojan in python, for penetration testers
[53星][8d] [Java] blackhacker511/blackrat Java编写的远控
[52星][12d] [Py] technowlogy-pushpender/technowhorse TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
[50星][11d] [C#] brunull/pace A Remote Access Tool for Windows.
[46星][1m] [Pascal] 0x48piraj/malwarex Collection of killers
[46星][1m] [PHP] davidtavarez/pinky pinky - The PHP mini RAT (Remote Administration Tool)
[46星][20d] [Shell] infosecn1nja/ycsm This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
[46星][18d] [Java] m301/rdroid [Android RAT] Remotely manage your android phone using PHP Interface
[46星][2y] pentestpartners/ptp-rat Exfiltrate data over screen interfaces
[44星][2y] [Shell] taherio/redi Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
[41星][3y] [C] killswitch-gui/hotload-driver C++
[40星][5y] [C++] lingerhk/0net 一个简单的Windows远程控制后门
[40星][3y] [Visual Basic .NET] mwsrc/betterrat Better Remote Access Trojan
[39星][1m] [Shell] samyk/easel-driver Easel driver for Linux (and Mac/Windows) + remote access to CNC controller
[37星][11d] [PS] 5alt/zerorat ZeroRAT是一款windows上的一句话远控
[36星][5m] [C#] blackvikingpro/aresskit Next Generation Remote Administration Tool (RAT)
[35星][3y] ritiek/rat-via-telegram Removed according to regulations
[29星][1m] [Py] the404hacking/windows-python-rat A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
[26星][2y] [Py] thegeekht/loki.rat Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
[25星][9m] [D] alexa-d/alexa-openwebif alexa skill to control your openwebif device
[24星][2y] [Py] rootm0s/casper 👻 Socket based RAT for Windows with evasion techniques and other features for control
[22星][16d] [C#] rainkin1993/remote-access-trojan-database A database of RAT collected from Internet
[21星][11d] [Py] kaiiyer/backnet Backdoor+Botnet or BackNet is a Python Remote Access Tool.
[19星][7d] [Py] lithium95/controll_remote_access_trojan Created a VERY SIMPLE remote access Trojan that will establish administrative control over any windows machine it compromises.
[18星][10m] [PHP] eddiejibson/limitrr-php Better PHP rate limiting using Redis.
[18星][3y] [Py] landonpowell/orwell-rat-and-botnet Orwell is a RAT and Botnet designed as a trio of programs by Landon Powell.
[17星][17d] [YARA] deadbits/yara-rules Collection of YARA signatures from individual research
[17星][2m] [PHP] rizer0/rat-hunter detect trojans by easy way
[14星][3y] [Java] mhelwig/adwind-decryptor Simple decrypter for Java AdWind, jRAT, jBifrost trojan
[14星][2y] [Py] mitre/caldera-agent
[14星][1y] shifa123/maarc A Python - Remote Administration Tool (RAT)
[12星][2y] [JS] node-rat/noderat NodeRat is remote access tool made with NodeJS and python
[11星][3y] [Pascal] mwsrc/schwarze-sonne-rat SS-RAT (Schwarze-Sonne-Remote-Access-Trojan)
[10星][7m] [Go] alanbaumgartner/aurora Aurora Remote Administration Tool
[10星][12m] [Py] user696/mrrat
[9星][2y] [Py] cisco-talos/remcos-decoder Talos Decryptor POC for Remcos RAT version 2.0.5 and earlier
[9星][8d] [Py] federicochieregato/darkfox Remote access trojan created using WinRar with firefox installer and python Reverse Shell embedded.
[8星][2y] thejollysin/i-wish-i-were-at-defcon-25-hack-a-thon My own "I wish I were at DefCon 25" Hack-a-Thon
[8星][4y] [C++] xyl2k/black-eye-rsa-attacking-toolkit-v0.1f-compiled The great RSA Attacking Toolkit compiled for Windows
[7星][2y] [C#] advancedhacker101/android-c-sharp-rat-server This is a plugin for the c# R.A.T server providing extension to android based phone systems
[7星][6m] [Py] e-rror/hiroo
[7星][2y] [C#] mitre/caldera-crater
[7星][1y] [JS] roccomuso/netrat Damn easy multiplatform Node.js RAT generator.
[7星][2y] [Py] lukebob-zz/c2-pwn Uses Shodan API to pull down C2 servers to run known exploits on them.
[6星][18d] [Py] apacketofsweets/apollo A simple, lightweight Remote Access Tool written in Python
[6星][1y] [Py] z4rk/winshell Python opensource RAT/Botnet
[6星][4y] [Visual Basic .NET] gaiththewolf/d-rat_vb.net_mysql_php D-RAT [VB.NET]+[MySQL]+[PHP]
[6星][7d] [PHP] katsana/remote-control Grant remote access to user account without sharing credentials
[5星][8m] [Go] alepacheco/client Windows, OS X and linux RAT client
[5星][17d] [C++] melardev/xeytanwin32-rat WORK IN PROGRESS. RAT written in C++ using Win32 API
[4星][16d] [C++] izanbf1803/rat-cpp-prototype A simple RAT.
[4星][3m] [C++] melardev/xeytanwxcpp-rat Work in Progress. RAT written in C++ using wxWidgets
[3星][2y] [Py] bedazzlinghex/memory-analysis Contains tools to perform malware and forensic analysis in Memory
[3星][1m] [Kotlin] eskatos/creadur-rat-gradle Apache RAT (Release Audit Tool) Gradle Plugin
[3星][1m] [Py] gbrn1/pirate Python Remote Access Tool
[2星][4y] [Py] dakotanelson/multicat PoC RAT using the sneaky-creeper data exfiltration library
[2星][4y] [Visual Basic .NET] retrobyte/shadowtech-rat An example of a remote administration tool.
[None星]socprime/sobaken-rat-detector

[610星][1y] [PS] fortynorthsecurity/wmimplant This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
[518星][8m] [Visual Basic .NET] nyan-x-cat/lime-rat LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
[493星][6m] [Py] viralmaniar/powershell-rat Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
[360星][8d] [C#] nyan-x-cat/asyncrat-c-sharp Open-Source Remote Administration Tool For Windows C# (RAT)
[340星][3y] [Pascal] malwares/remote-access-trojan Windows Remote-Access-Trojan
[229星][4y] [Py] hood3drob1n/jsrat-py This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
[149星][4m] [Py] safebreach-labs/sireprat Remote Command Execution as SYSTEM on Windows IoT Core
[119星][11d] [C#] dannythesloth/vanillarat VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
[117星][8d] [Py] thelinuxchoice/pyrat Windows远控
[106星][9m] [C#] r-smith/splice-admin A remote Windows administration tool. You know you want it.
[104星][2y] [Py] syss-research/outis a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
[70星][3m] [PS] dsccommunity/certificatedsc DSC resources to simplify administration of certificates on a Windows Server.
[67星][4y] [C#] stphivos/rat-shell Windows Remote Access Trojan (RAT)
[39星][2m] [Py] swordf1sh/moderat Experimental Windows Remote Administration and Spy Tool in Python + GUI
[20星][1y] [Visual Basic] nyan-x-cat/asyncrat Remote Administration Tool For Windows
[17星][6m] [Py] operatorequals/smbrat A Windows Remote Administration Tool in Visual Basic with UNC paths
[16星][6m] [PS] yschgroup/skyrat SkyRAT - Powershell Remote Administration Tool

[131星][8m] [C] abhishekkr/n00brat 用于POSiX（Linux / Unix）系统的远程管理工具包（或Trojan），以Web服务方式运行
[68星][10m] [JS] webxscan/linux_rat LINUX集群控制(LINUX反弹式远控)
[51星][15d] [C] thibault-69/rat-hodin-v2.9 Remote Administration Tool for Linux
[20星][2m] [C] lillypad/swamp-rat A Linux RAT in C
[7星][5m] [C] ctsecurity/stealth-kid-rat Stealth Kid RAT (SKR) is an open source Linux remote administration tool written in C. Licensed under MIT. The SKR project is fully developed and tested on Debian GNU-Linux (Deb 9.3 "Stretch") platform. The RAT will soon be available on Windows platform by mid 2018.

[430星][9d] [ObjC] sap/macos-enterprise-privileges For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
[75星][4y] [Pascal] xlinshan/coldroot Mac OS Trojan (RAT) made with love <3
[74星][1y] [Py] kdaoudieh/bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
[21星][2m] [Py] cys3c/evilosx A pure python, post-exploitation, remote administration tool (RAT) for macOS / OS X.

[1815星][8m] [Smali] ahmyth/ahmyth-android-rat Android Remote Administration Tool
[939星][7y] designativedave/androrat Remote Administration Tool for Android devices
[931星][6y] [Java] wszf/androrat Remote Administration Tool for Android
[172星][2y] [Java] the404hacking/androrat AndroRAT | Remote Administrator Tool for Android OS Hacking
[138星][3y] [Java] mwsrc/betterandrorat Android Remote Access Trojan
[66星][7y] [Java] ibrahimbalic/androidrat Android RAT
[64星][16d] [Java] globalpolicy/phonemonitor A Remote Administration Tool for Android devices
[50星][3y] [Py] alessandroz/pupy Python编写的远控、后渗透工具，跨平台（Windows, Linux, OSX, Android）
[6星][2y] rev-code/androidclient Android remote administration client

原文：https://github.com/alphaSeclab/awesome-rat

登录发表评论

标签（标签）

Search

RAT

目录

开源工具

pupy

工具

文章

Covenant

工具

文章

Slackor

工具

文章

QuasarRAT

工具

文章

EvilOSX

工具

文章

Merlin

工具

文章

商业软件

Team Viewer

工具

文章

恶意软件(部分)

Gh0st

工具

文章

NanoCore

工具

文章

NjRat

工具

文章

Revenge RAT

工具

文章

PlugX

工具

文章

RemcosRAT

L0rdixRAT

LodaRAT

GulfRAT

NetWireRAT

JhoneRAT

Dacls

BlackRemote

Orcus

NukeSped

DarkComet

WarZone RAT

BlackShades

DenesRAT

WSH RAT

Qrypter RAT

Adwind

CannibalRAT

jRAT

jsRAT

CrossRat

ArmaRat

RokRAT

CatKARAT

TheFatRat

OmniRAT

LuminosityLink

其他

利用公开服务

Telegram

工具

文章

Twitter

工具

文章

GMail

工具