deviceobject/android-ratlist

Android - Remote Access Trojan List

Remote Access Tool Trojan List - Android

This repo contents all RAT trojan android (and dataset) as I know so far (free or paid app) with permission and feature used list for my documentation. Interesting? Well you need to see this awesome repo https://github.com/MobSF/Mobile-Security-Framework-MobSF/

Looking for free port forwarding without buy VPN or Router setting?? Use Ngrok

• DroidJack

  • Camera, Microphone, Location
  • Storage
  • SMS, CALL, Contact
  • Whatsapp Reader
  • Browser History
  • App Manager

• AndroRAT https://github.com/DesignativeDave/androrat https://github.com/karma9874/AndroRAT https://github.com/The404Hacking/AndroRAT

  • Contact, Call logs, Call, SMS
  • Location, Camera, Microphone
  • Streaming video (for activity based client only)
  • Do a toast, message
  • Give call
  • Open an URL in the default browser
  • Do vibrate the phone

• SpyNote

  • Bind app, Storage, Location
  • SMS, Call, Call logs, Contact, Camera
  • Listen live conversation through mic, record mic sound live.
  • Check browser history.
  • Check installed apps.
  • Get phone’s information (IMEI, WIFI MAC, PHONE CARRIER).
  • Fun Panel (Show messages, shake the phone etc)

• AhMyth https://github.com/AhMyth/AhMyth-Android-RAT

  • Camera, Mircophone,
  • Storage, Location
  • Message, Call, Call logs, Contact

• TheFatRAT https://github.com/Screetsec/TheFatRat

  • execute command
  • process lost
  • camera snap, stream, list, microphone

• BetterAndroRAT https://github.com/mwsrc/BetterAndroRAT

  • Add and remove app
  • Camera, Microphone, Storage
  • Call & SMS
  • Remote Device Controller

• UnknownRAT

  • Storage access
  • Android Tools such, take photo, screenshot etc
  • Record audio

• android_trojan / Android Trojan https://github.com/androidtrojan1/android_trojan

  • shell command, browser history, microphone, location, storage
  • add and remove app
  • call log, contact,sms dump,

• OmniRAT

  • Fully Remote Access
  • File Manager, add and remove apps
  • App Widgets
  • Full System Information
  • Call & SMS

• Android Voyage

  • Remote Android Screen
  • Screenshot, keylog, traffic monitor
  • Make as system application
  • Lock unlock, hide unhide app
  • Remove android password
  • Message Access
  • Bricks the device, Anti Antivirus
  • Self Destructive Mode
  • Password Grabbers

• NetWire

  • camera
  • audio
  • keylogger
  • storage
  • download upload
  • location
  • etc

• rdroid https://github.com/m301/rdroid

  • Contact
  • System
  • App
  • Storage
  • Call
  • Message
  • Shell

• LokiDroid

  • SMS, Call, Call logs, Contact, Toast, Browser
  • Storage, Location, Microphone, Camera
  • Phone's Hardware and Software details
  • Sim details
  • Internet details and IP
  • offline commands for bots
  • Multiple commands for multiple bots
  • http RAT ( not required port forwarding)

• KevDroid

  • Installed applications
  • Phone number
  • Phone Unique ID
  • Location (the application tries to switch on the GPS, 10s capture location)
  • Contact, SMS, Call logs, Call, Mails
  • Storage, Microphone

• columbus-trojan https://github.com/project-columbus/trojan (cute trojan)

  • Image (front-facing camera)
  • 10-second sound clip (microphone)
  • Location (mobile triangulation)

• GhostCtrl

  • Admin
  • Voice record
  • Message
  • Location

• Pupy https://github.com/n1nj4sec/pupy

  • Text to speech for Android to say stuff out loud
  • webcam snapshots (front cam & back cam)
  • GPS tracker !

• TeleRAT and IIRAT (Telegram BOT)

  • Clipboard
  • App list
  • SMS, Contact
  • Storage, Microphone, Camera
  • Control Admin Screen, Vibrate

• Hidden Cobra

  • Proxy
  • Contact
  • SMS
  • Payload

• Dendroid https://github.com/nyx0/Dendroid

  • SMS, Call, Call logs,
  • Opening web pages
  • Uploading images and video
  • Opening an application
  • Performing denial-of-service attacks
  • Changing the command and control server

• Casperspy https://github.com/dhanumurti

  • Similar with dendroid
  • Actually Botnet by dendroid
  • SMS
  • Camera, Storage, Microphone
  • Browser open page

• Joanap

  • Mic
  • botnet
  • steal log

• SHConnect

  • Camera
  • Location
  • Storage

• HighRise

  • Incoming outgoing SMS

• LaRAT https://github.com/c4wrd/LaRat

  • Get messages
  • Screenshot Functionality
  • Camera Access
  • Add Google form for passwords

• Triout Framework

  • Record phonecall, save it, send it to C&C
  • SMS Logs
  • Call Logs
  • Steal Images or Video, Camera Access
  • Hide

• Cerberusapp

  • Storage
  • Location
  • Camera
  • Admin
  • notdeleteable
  • more

• Pegasus

  • Storage, Microhpone, Location
  • Screenshot
  • Calender
  • Instant Messaging
  • Contact & Call & SMS & Mail
  • Browser History
  • Device Setting

• Adobot https://github.com/adonespitogo/AdoBot

  • Realtime command execution
  • Schedule commands
  • Hidden app icon (stealth mode)
  • SMS, Call, Call logs, Contact
  • etc

• Adroid Spy App https://github.com/abhinavsuthar/Android_Spy_App

  • Contact, Call logs, SMS
  • Logs
  • Location, Storage
  • Etc

• SpyApp Client https://github.com/ghazikr/SpyAppClient

  • Notification Listener (Facebook, whatsapp, email, instagram etc)
  • Call Logs
  • Contact
  • SMS
  • Etc

• i-spy Android https://github.com/JohnReagan/i-spy-android

  • Camera
  • Location
  • Storage
  • Etc

• FinSpy

  • Storage
  • Phone information
  • Call Sms Mms
  • Contact
  • GPS Location
  • Voip record such Skype, WeChat, Viber, LINE etc

• Monokle

  • GPS location
  • Audio record, call record
  • Screen recording
  • Keylogger and fingerprint-device duplicate
  • History browser and Call log, SMS Email logs, create a Call and SMS
  • Contact and calender
  • Shell as root (rooted/rootable)

• Cerberus Banking

  • Bots
  • Bank and CC Logs information
  • Mail logs
  • SMS, Call (+Forward), Contact, GPS, Audio
  • Monitoring all activity / logs
  • Push to turnoff Play Protected (Disable)
  • Download, Install, Remove Apps
  • Lock device

• Joker (infect many apps in playstore)

  • SMS CALL CONTACT
  • Storage
  • Manipulating subscription (money)

• Hawkshaw https://github.com/saksham2410/Android-RAT---Hawkshaw

  • similar "Adroid Spy App"
  • Call, SMS, Contact, Phone Information
  • Camera, Audio, Location, Storage
  • Account Detail
  • Lock, Vibrate, Flash
  • Owner Access (Boot)
  • Inject, Install / Remove Apps
  • Logs and Keylog (messenger, socialmedia)

• Strandhogg

  • Hijack Session, apps log
  • Almost all permission

• TearDroid PHP https://github.com/ScRiPt1337/Teardroid-phprat

  • Command
  • SMS Contact Call
  • Storage

• AndroSpy https://github.com/qH0sT/AndroSpy

  • Camera
  • SMS Contact Call
  • Storage
  • Install, Inject

• GravityRAT

  • SMS Contact Call
  • Storage
  • exfiltrate

• BlueEagle jRAT

  • similar "jRAT"
  • Call, SMS, Contact, Phone Information
  • Camera, Audio, Location, Storage
  • Account Detail
  • Owner Access (Boot)
  • Block google protect

• TalentRAT https://github.com/honglvt/TalentRAT

  • SMS CALL CONTACT
  • GPS
  • CAMERA AUDIO

• WH-RAT https://github.com/wh-Cyberspace/WH-RAT (Similar with SpyNote NjRAT)

  • x soon
  • etc

• Mass RAT https://github.com/NYAN-x-CAT/Mass-RAT

  • sms call
  • storage
  • camera, etc

• HaxRAT https://github.com/Hax4us/haxRat

  • storage, camera
  • audio, etc

• Rogue RAT

  • Camera, Audio
  • Storage, GPS
  • Keylog, etc

• LodaRAT

  • Camera, Microphone, Phone
  • Storage, GPS
  • Install, Account Credentials, etc

• Rafel RAT https://github.com/swagkarna/Rafel-Rat

  • GPS, Storage
  • Camera, Audio, Phone