OnlyRAT [BETA]

Blue Cosmo | 01/07/2022

                                                                     _;,
                                                 ,,=-,--,,__     _,-;:;;},,,_    
            _,oo,         Ll                 _,##&&&&$$&&$$$&-=;%%^%&;v:&& @ `=,_   
          ,oO" `0}        Ll              ,%#####&#>&&$$$$&$$$&,&'$$#`"%%;,,,*%^<}  
      _,--O;_,  0_        Ll            ,%%%%%&%-#&###$$"$$$$$*;&&$,#;%^*%$$^{,%;'
   ,cC'oO`'CC  ,OnnNNNNn, Ll  YY,      ,%#&%%$$$$%%%%%##&&^$%^%&&&$$'&#,-%%--"'
  ,CCCO"   `C ,0`Nn`  `Nn Ll   YY,    ,;;##&,$$$$$$$;,%%%&&%%%&&&&&&$$%%'
  {CC{       ,0' NN    NN Ll    Yy  yY';#&,#,$$$$$%%%%%%%%&%%%&&&&&&%%`
  CCC(     _o0   NN    NN Ll     YyyY ,;&##&###%%$$%&&%%%%#^%^&&&&&%{`
 ,OCC{    ,0C    NN    NN Ll      YY   ;#&&#####&%;%&&,%%%%#%=%%%&^%%               
,O`'"Cc_.o0cC    NN    NN Ll y,   YY   ;&&&^##&&&$%&&&%%%"`     `%%%%               
o0    _o0"` '`   NN    NN Ll  Yy,yYY  '^%%&VGh%%%%%&&"^%_,,       "%%%,_      _,.,_  
0o,_,oo0"        NN    NN Ll   `YyY`    ``'"lIG9ubHkg,,""''`        ""%%>_,;VyIG5lZ;,   
"00O"`                                          ``'``""UkFUIHlvdSdsbCBldm;"       `"WQ=,

[!!] DISCLAIMER

TLDR: Please use securily and ethically :D

Feel free to use this RAT on any computer that you own or have permissions to test malicious code on. It's perfectly legal. But do not install this RAT on targets you don't have permission to test malware on. Not only is it illegal, but by doing so you are putting that computer at risk. Since the RAT needs to be able to remotely connect, it is enabling a persistence that other hackers on the network may target or even bruteforce.

The purpose of this RAT is to teach members of the security community the basics of malware development, so do not use with malintent. Malware development is an essential skill that is often overlooked within the security world. By learning malware development, security researchers can both better understand how hackers think and develop malicious code, as well as learning to develop their own for security purposes. By making a single RAT that can hold all of the teachings in one form factor, it is much easier to connect the lessons.

Overview:

OnlyRAT [Only Remote Access Tool] is the only RAT you'll ever need. We will be able to use this tool to remotely command and control windows computers.

The RAT has a multitude of ways of how it can be installed on to a target pc. Whether it is getting them to run a file all the way to RubberDucky and BashBunny payloads.

Once installed we will have remote administrative access to our target. We can connect to our target through our Python console on our attacker pc. The onlyrat console has plenty of payloads we can then use on our target or we can simply enjoy our backdoor access. Enjoy!

Resources:

Requirements:

Attacker PC

Security Linux [Debian Based]
- Kali Linux
- Parrot OS
Python3
SSH

Target PC

Windows 10 privileged user

Instructions:

Target Installation

The installers folder contains all the ways we can install the RAT on to our target

Attacker Installation

install only rat by cloning this repository

git clone https://github.com/CosmodiumCS/OnlyRAT.git

install dependencies for OnlyRAT
YES, the onlyRAT directory is supposed to disappear
restart terminal once installation is complete

cd OnlyRAT
sh install.sh

Attacker Console

Run onlyrat in your terminal for help

onlyrat

Append configuraiton file to specify target
- read Extraneous for more information

onlyrat bluecosmo.rat

Payloads:

[+] Command and Control:
    [orconsole] ------ Remote Console
    [fix orconsole] -- Fix Remote Console
    [upload] --------- Upload File 
    [downlaod] ------- Download File
    [restart] -------- Restart Target PC
    [shutdown] ------- Shutdown Target PC
    [killswitch] ----- Removes OnlyRAT From Target

[+] Reconnaissance:
    [install keylogger] ------ Install Keylogger
    [install screencapture] -- Install ScreenCapture
    [install webcam] --------- Install WebCam Capture
    [grab keylogs] ----------- Grab Keylogs
    [grab screenshots] ------- Grab ScreenShots From ScreenCapture
    [grab webcam] ------------ Grab WebCam Photos

[+] Options:
    [help] ------- Help Menu
    [man] -------- Onlyrat Manual
    [config] ----- Display RAT File
    [version] ---- Version Number
    [update] ----- Update OnlyRAT
    [uninstall] -- Uninstall OnlyRAT
    [quit] ------- Quit

Extraneous:

Configuration file?

The configuration file username.rat is a file we obtain through our OnlyRAT installers. It saves obfuscated information that OnlyRAT needs in order to connect back to our target computer. Having configuration files allows hackers to have a database of all the comprimised pc's they have access to.

hellwound/OnlyRAT