ToRat - GitLite

KO | EN

gitlite — search

#shell #artificial-intelligence #go #codex #markdown #agents #windows #containers #cloud-native #claude

ToRat

(★ 1,028)

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

File Explorer

ZIP Download

- config.yml
- dependabot.yml
- FUNDING.yml
- - main.go
- - banner.txt
  - main.go
- _config.yml
- main.go
- models.go
- runcmd.go
- - crypto.go
  - crypto_test.go
- conf.go
- netclient.go
- netclient_notor.go
- persit_darwin.go
- persit_linux.go
- persit_windows.go
- rpcapi.go
- setup.go
- - crypto.go
- api.go
- client_ishell.go
- model.go
- server.go
- server_ishell.go
- util.go
.dockerignore
.gitattributes
.gitignore
build.sh
Dockerfile
go.mod
go.sum
LICENSE
README.md
run.sh
ToRat_Logo.png

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

# Project Badges

License Visit
CircleCI Visit
Go Report Card Visit
Docker Cloud Build Status Visit

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism
currently supporting Windows, Linux, MacOS clients.

## DISCLAIMER
USE FOR EDUCATIONAL PURPOSES ONLY

## Wiki
[How to use ToRat Docker Image](https://github.com/lu4p/ToRat/wiki/How-to-use-the-ToRat-Docker-Image)

## Preview
<a href="https://asciinema.org/a/318534" target="_blank"><img src="https://asciinema.org/a/318534.svg" /></a>

### Client Commands

Command         |    Info
  ---             |    ---
  **cd**          |    change the working directory of the client
  **ls**          |    list the content of the working directory of the client
  **shred**       |    delete files/ directories unrecoverable
  **screen**      |    take a Screenshot of the client
  **cat**         |    view Textfiles from the client including .docx, .rtf, .pdf, .odt
  **alias**       |    give the client a custom alias
  **down**        |    download a file from the client
  **up**          |    upload a file to the client
  **speedtest**   |    speedtest a client's internet connection
  **hardware**    |    collects a variety of hardware specs from the client
  **netscan**     |    scans a clients entire network for online devices and open ports
  **gomap**       |    scan a local ip on a clients network for open ports and services
  **escape**      |    escape a command and run it in a native shell on the client
  **reconnect**   |    tell the client to reconnect
  **help**        |    lists possible commands with usage info
  **exit**        |    background current session and return to main shell

### Server Commands

Command     |  Info
  ---         |  ---
  **select**  | select client to interact with
  **list**    | list all connected clients
  **alias**   | select client to give an alias
  **cd**      | change the working directory of the server
  **help**    | lists possible commands with usage info
  **exit**    | exit the server

## Current Features
### Architecture
- RPC (Remote procedure Call) based communication for easy addition of new functionality
- Automatic upx leads to client binaries of ~6MB with embedded Tor
- sqlite via gorm for storing information about the clients
- client is obfuscated via [garble](https://github.com/burrowers/garble)

## Server Shell
- Cross Platform reverse shell (Windows, Linux, Mac OS)
- Supports multiple connections
- Welcome Banner
- Colored Output
- Tab-Completion of:
  - Commands
  - Files/ Directories in the working directory of the server

- Unique persistent ID for every client
	- give a client an Alias
	- all Downloads from client get saved to ./$ID/$filename

## Persistence
- Windows:
	- [ ] Multiple User Account Control Bypasses (Privilege escalation)
	- [ ] Multiple Persistence methods (User, Admin)

- Linux:
  - [ ] Multiple Persistence methods (User, Admin)

## Tor
- Fully embedded Tor within go

- the ToRAT_client communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)
	- [x] anonymity of client and server
	- [x] end-to-end encryption

- optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP
	- [x] smaller binary ~3MB upx'ed
	- [ ] anonymity of client and server

## Upcoming Features
- [ ] Bulk Commands
- [ ] Persistence and privilege escalation for Linux
- [ ] Persistence and privilege escalation for Mac OS
- [ ] Support for Android and iOS (needs fix of https://github.com/ipsn/go-libtor/issues/12)
- [ ] [File-less Persistence on Windows](https://github.com/ewhitehats/InvisiblePersistence)

## Contribution
All contributions are welcome you don't need to be an expert in Go to contribute.

You may want to join the `#torat` channel over at the [Gophers Slack](https://invite.slack.golangbridge.org/)

## Credits
- [Tor](https://www.torproject.org/)
- [Tor controller library](https://github.com/cretz/bine)
- [Python Uacbypass and Persistence Techniques](https://github.com/rootm0s/WinPwnage)
- [Modern Cli](https://github.com/abiosoft/ishell)
- [Colored Prints](https://github.com/fatih/color)
- [Screenshot library](https://github.com/vova616/screenshot)
- [TLS Certificate generator](https://github.com/lu4p/genCert)
- [Shred library](https://github.com/lu4p/shred)
- [Extract Text from Documents](https://github.com/lu4p/cat)
- [RPC](https://golang.org/pkg/net/rpc/)
- [UPX](https://upx.github.io/)
- [Obfuscation](https://github.com/burrowers/garble)