ToRat - ToRat is a Remote Administation tool written in Go

项目说明

<a href=" target="_blank"> <img src="./ToRat_Logo.png" width="180px"></a>

![License]()
![CircleCI]()
![Go Report Card]()
![Docker Cloud Build Status]()

A Cross Platform Remote Administration 工具 written in Go using Tor as its transport mechanism
currently supporting Windows, Linux, MacOS clients.

DISCLAIMER

USE FOR EDUCATIONAL PURPOSES ONLY

Wiki

How to use ToRat Docker Image

Preview

<a href=" target="_blank"><img src=" /></a>

Client Commands

Command | Info
--- | ---
cd | change the working directory of the 客户端
ls | list the content of the working directory of the 客户端
shred | delete files/ directories unreco
screen | take a Screenshot of the client
cat | view Textfiles from the 客户端 including .docx, .rtf, .pdf, .odt
alias | give the client a custom alias
down | download a file from the client
up | upload a file to the client
speedtest | speedtest a 客户端's internet connection
hardware | collects a of hardware specs from the 客户端
netscan | scans a clients entire 网络 for online devices and open ports
gomap | scan a local ip on a clients 网络 for open ports and services
escape | escape a command and run it in a nati on the 客户端
reconnect | tell the client to reconnect
help | lists possible commands with usage info
exit | background current session and return to main shell

Ser

Command | Info
--- | ---
select | select client to interact with
list | list all connected clients
alias | select client to give an alias
cd | change the working directory of the 服务端
help | lists possible commands with usage info
exit | exit the server

Current Features

Architecture

RPC (Remote procedure Call) based communication for easy addition of new functionality

Automatic upx leads to 客户端 binaries of ~6MB with embedded Tor

sqlite via gorm for storing information about the clients

client is obfuscated

Ser

Cross Platform reverse shell (Windows, Linux, Mac OS)

Supports multiple connections

Welcome Banner

Colored Output

Tab-Completion of:

- Commands
- Files/ Directories in the working directory of the 服务端

Unique persistent ID for every client

- give a client an Alias
- all Downloads from 客户端 get saved to ./$ID/$filename

Persistence

Windows:

- [ ] Multiple User Account Control Bypasses (Pri escalation)
- [ ] Multiple Persistence methods (User, Admin)

Linux:

- [ ] Multiple Persistence methods (User, Admin)

Tor

Fully embedded Tor within go

the ToRAT_客户端 communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)

- [x] anonymity of client and server
- [x] end-to-end encryption

optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP

- [x] smaller binary ~3MB upx'ed
- [ ] anonymity of client and server

Upcoming Features

[ ] Bulk Commands

[ ] Persistence and pri escalation for Linux

[ ] Persistence and pri escalation for Mac OS

[ ] Support for Android and iOS (needs fix of )

[ ] File-less Persistence on Windows

Contribution

All contributions are welcome you don't need to be an expert in Go to contribute.

You may want to join the #torat channel over at the Gophers Slack

Credits

Tor

Tor controller library

Python Uacbypass and Persistence Techniques

Modern Cli

Colored Prints

Screenshot library

TLS Certificate generator

Shred library

Extract Text from Documents

RPC

UPX

Obfuscation

项目信息

开发语言：Go

Star 数：1035

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕ToRat is a Remote Administation 工具 written in Go using Tor as a transport mechanism and RPC for communication展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。