Remote Access Tool Trojan List - Android

This repo contents all RAT trojan android (and Dataset) as I know so far (free or paid app) with permission and feature used list for my documentation.

Looking for free port forwarding without buy VPN or Router setting?? Use Ngrok

Please don't download the project if you won't infected by Trojan and make sure recheck before download or install from unknown source (Trojan in a Trojan??).

• DroidJack

  • Camera, Microphone, Location
  • Storage
  • SMS, CALL, Contact
  • Whatsapp Reader
  • Browser History
  • App Manager

• AndroRAT https://github.com/DesignativeDave/androrat https://github.com/karma9874/AndroRAT https://github.com/The404Hacking/AndroRAT

  • Contact, Call logs, Call, SMS
  • Location, Camera, Microphone
  • Streaming video (for activity based client only)
  • Do a toast, message
  • Give call
  • Open an URL in the default browser
  • Do vibrate the phone

• SpyNote

  • Bind app, Storage, Location
  • SMS, Call, Call logs, Contact, Camera
  • Listen live conversation through mic, record mic sound live.
  • Check browser history.
  • Check installed apps.
  • Get phone’s information (IMEI, WIFI MAC, PHONE CARRIER).
  • Fun Panel (Show messages, shake the phone etc)

• AhMyth https://github.com/AhMyth/AhMyth-Android-RAT

  • Camera, Mircophone,
  • Storage, Location
  • Message, Call, Call logs, Contact

• TheFatRAT https://github.com/Screetsec/TheFatRat

  • execute command
  • process lost
  • camera snap, stream, list, microphone

• BetterAndroRAT https://github.com/mwsrc/BetterAndroRAT

  • Add and remove app
  • Camera, Microphone, Storage
  • Call & SMS
  • Remote Device Controller

• UnknownRAT

  • Storage access
  • Android Tools such, take photo, screenshot etc
  • Record audio

• android_trojan / Android Trojan https://github.com/androidtrojan1/android_trojan

  • shell command, browser history, microphone, location, storage
  • add and remove app
  • call log, contact,sms dump,

• OmniRAT

  • Fully Remote Access
  • File Manager, add and remove apps
  • App Widgets
  • Full System Information
  • Call & SMS

• Android Voyage

  • Remote Android Screen
  • Screenshot, keylog, traffic monitor
  • Make as system application
  • Lock unlock, hide unhide app
  • Remove android password
  • Message Access
  • Bricks the device, Anti Antivirus
  • Self Destructive Mode
  • Password Grabbers

• NetWire

  • camera
  • audio
  • keylogger
  • storage
  • download upload
  • location

• rdroid https://github.com/m301/rdroid

  • Contact
  • System
  • Storage
  • Message
  • Shell

• LokiDroid

  • SMS, Call, Call logs, Contact, Toast, Browser
  • Storage, Location, Microphone, Camera
  • Phone's Hardware and Software details
  • Sim details
  • Internet details and IP
  • offline commands for bots
  • Multiple commands for multiple bots
  • http RAT ( not required port forwarding)

• KevDroid

  • Installed applications
  • Phone number
  • Phone Unique ID
  • Location (the application tries to switch on the GPS, 10s capture location)
  • Contact, SMS, Call logs, Call, Mails
  • Storage, Microphone

• columbus-trojan https://github.com/project-columbus/trojan (cute trojan)

  • Image (front-facing camera)
  • 10-second sound clip (microphone)
  • Location (mobile triangulation)

• GhostCtrl

  • Admin
  • Voice record
  • Message
  • Location

• Pupy https://github.com/n1nj4sec/pupy

  • Text to speech for Android to say stuff out loud
  • webcam snapshots (front cam & back cam)
  • GPS tracker !

• TeleRAT and IIRAT (Telegram BOT)

  • Clipboard
  • App list
  • SMS, Contact
  • Storage, Microphone, Camera
  • Control Admin Screen, Vibrate

• Hidden Cobra

  • Proxy
  • Contact
  • Payload

• Dendroid https://github.com/nyx0/Dendroid

  • SMS, Call, Call logs,
  • Opening web pages
  • Uploading images and video
  • Opening an application
  • Performing denial-of-service attacks
  • Changing the command and control server

• Casperspy https://github.com/dhanumurti

  • Similar with dendroid
  • Actually Botnet by dendroid
  • Camera, Storage, Microphone
  • Browser open page

• Joanap

  • botnet
  • steal log

• SHConnect

  • Camera
  • Location
  • Storage

• HighRise

  • Incoming outgoing SMS

• LaRAT https://github.com/c4wrd/LaRat

  • Get messages
  • Screenshot Functionality
  • Camera Access
  • Add Google form for passwords

• Triout Framework

  • Record phonecall, save it, send it to C&C
  • SMS Logs
  • Call Logs
  • Steal Images or Video, Camera Access

• Cerberusapp

  • Storage
  • Location
  • Camera
  • Admin
  • notdeleteable

• Pegasus (Sample https://github.com/9aylas/Pegasus-samples) (decompiled https://github.com/jonathandata1/pegasus_spyware)

  • Storage, Microhpone, Location
  • Screenshot
  • Calender
  • Instant Messaging
  • Contact & Call & SMS & Mail
  • Browser History
  • Device Setting

• Adobot https://github.com/adonespitogo/AdoBot

  • Realtime command execution
  • Schedule commands
  • Hidden app icon (stealth mode)
  • SMS, Call, Call logs, Contact

• Adroid Spy App https://github.com/abhinavsuthar/Android_Spy_App

  • Contact, Call logs, SMS
  • Location, Storage

• SpyApp Client https://github.com/ghazikr/SpyAppClient

  • Notification Listener (Facebook, whatsapp, email, instagram etc)
  • Call Logs
  • Contact

• i-spy Android https://github.com/JohnReagan/i-spy-android

  • Camera
  • Location
  • Storage

• FinSpy

  • Storage
  • Phone information
  • Call Sms Mms
  • Contact
  • GPS Location
  • Voip record such Skype, WeChat, Viber, LINE etc

• Monokle

  • GPS location
  • Audio record, call record
  • Screen recording
  • Keylogger and fingerprint-device duplicate
  • History browser and Call log, SMS Email logs, create a Call and SMS
  • Contact and calender
  • Shell as root (rooted/rootable)

• Cerberus Banking

  • Bank and CC Logs information
  • Mail logs
  • SMS, Call (+Forward), Contact, GPS, Audio
  • Monitoring all activity / logs
  • Push to turnoff Play Protected (Disable)
  • Download, Install, Remove Apps
  • Lock device

• Joker (infect many apps in playstore)

  • SMS CALL CONTACT
  • Storage
  • Manipulating subscription (money)

• Hawkshaw https://github.com/saksham2410/Android-RAT---Hawkshaw

  • similar "Adroid Spy App"
  • Call, SMS, Contact, Phone Information
  • Camera, Audio, Location, Storage
  • Account Detail
  • Lock, Vibrate, Flash
  • Owner Access (Boot)
  • Inject, Install / Remove Apps
  • Logs and Keylog (messenger, socialmedia)

• Strandhogg

  • Hijack Session, apps log
  • Almost all permission

• TearDroid PHP https://github.com/ScRiPt1337/Teardroid-phprat

  • Command
  • SMS Contact Call
  • Storage

• AndroSpy https://github.com/qH0sT/AndroSpy

  • Camera
  • SMS Contact Call
  • Storage
  • Install, Inject

• GravityRAT

  • SMS Contact Call
  • Storage
  • exfiltrate

• BlueEagle jRAT

  • similar "jRAT"
  • Call, SMS, Contact, Phone Information
  • Camera, Audio, Location, Storage
  • Account Detail
  • Owner Access (Boot)
  • Block google protect

• TalentRAT https://github.com/honglvt/TalentRAT

  • SMS CALL CONTACT
  • CAMERA AUDIO

• WH-RAT https://github.com/wh-Cyberspace/WH-RAT (Similar with SpyNote NjRAT)

  • x soon

• Mass RAT https://github.com/NYAN-x-CAT/Mass-RAT

  • sms call
  • storage
  • camera, etc

• HaxRAT https://github.com/Hax4us/haxRat

  • storage, camera
  • audio, etc

• Rogue RAT

  • Camera, Audio
  • Storage, GPS
  • Keylog, etc

• LodaRAT

  • Camera, Microphone, Phone
  • Storage, GPS
  • Install, Account Credentials, etc

• Rafel RAT https://github.com/swagkarna/Rafel-Rat

  • GPS, Storage
  • Camera, Audio, Phone

• StrongPity

  • GPS, Storage
  • Phone, Boot, Network Info