TheFatRat - A Massive Exploiting Tool
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc. This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection.
TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus.
Information
This tool is for educational purpose only, usage of TheFatRat for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program.
Features !
- Fully Automating MSFvenom & Metasploit.
- Local or remote listener Generation.
- Easily Make Backdoor by category Operating System.
- Generate payloads in Various formats.
- Bypass anti-virus backdoors.
- File pumper that you can use for increasing the size of your files.
- The ability to detect external IP & Interface address .
- Automatically creates AutoRun files for USB / CDROM exploitation
- Checks for metasploit service and starts if not present
- Easily craft meterpreter reverse_tcp payloads for Windows, Linux, Android and Mac and another
- Start multiple meterpreter reverse_tcp listners
- Fast Search in searchsploit
- Bypass AV
- File pumper
- Create backdoor with another techniq
- Autorunscript for listeners ( easy to use )
- Drop into Msfconsole
- Some other fun stuff :)
Autorun Backdoor
- Autorun work if the victim disabled uac ( user acces control ) or low uac ( WINDOWS )
- What is uac ? you can visit ( http://www.digitalcitizen.life/uac-why-you-should-never-turn-it-off )
- I have also created 3 AutoRun files
- Simply copy these files to a CD or USB
- You can change the icon autorun file or exe in folder icon ( replace your another ico and replace name with autorun.ico )
HOW CHANGE THE ICONS ?
- Copy your icon picture to folder /TheFatrat/icons
- Change the name into autorun.ico
- And Replace
- Done
But it's shit! And your implementation sucks!
- Yes, you're probably correct. Feel free to "Not use it" and there is a pull button to "Make it better".
Installation
Instructions on how to install TheFatRat
git clone https://github.com/Screetsec/TheFatRat.git
cd TheFatRat
chmod +x setup.sh && ./setup.shUpdate
cd TheFatRat
./update && chmod +x setup.sh && ./setup.shTroubleshoot on TheFatRat
chk_tools script to use in case of problems in setup.sh of fatrat this script will check if everything is in the right version to run fatrat and will also provide you a solution for the problem
cd TheFatRat
chmod +x chk_tools
./chk_tools
Tools Overview
| Front View | Sample Feature |
|---|---|
 |  |
Documentation
- Documentation Available in Modules CEH v9 and V10 , Download source here
- Published in International Journal of Cyber-Security and Digital Forensics
- Youtube Videos
- How To Download & Install TheFatRat
- TheFatRat 1.9.6 - Trodebi ( Embed Trojan into Debian Package )
- hacking windows 10 with TheFatRat
- Hacking Windows using TheFatRat + Apache2 Server + Ettercap + Metasploit
- Hacking with a Microsoft Office Word Document from TheFatRat
- XSS to powershell attack and bypass Antivirus using BeEF + TheFatRat + Metasploit
- TheFatRat - Hacking Over WAN - Embedding Payload in Original Android APK - Without Port Forwarding
- How To Automatically Embed Payloads In APK's - Evil-Droid, Thefatrat & Apkinjector
- Bind FUD Payload with JPG and Hack over WAN with TheFatRat
Changelog
All notable changes to this project will be documented in this file.
About issues
- Read the document before making an issue
Alternative Best Tool - Generating Backdoor & Bypass
- Veil-Framework /Veil - Veil Framework
- Shellter - Shellter AV Evasion Artware
- Unicorn - Trustedsec
- MSFvenom Payload Creator (MSFPC) - g0tmi1k
- Venom - Pedro Ubuntu
- Phantom-Evasion - Diego Cornacchini
Credits & Thanks
- Offensive Security - Offensive Security
- dracOs Linux - Penetration Testing OS From Indonesia
- peterpt - Maintainer & Contributor
- Dana James Traversie - backdoor_apk
- z0noxz - Powerstager
- TrustedSec - Unicorn
- Raphael Mudge - External Source
- astr0baby - Reference Source
- NgeSEC Community
- Gauli(dot)Net - Lab Penetration
License
TheFatRat is made with
Danial Zahoor
Professional Ethical Hacker and Cybersecurity Researcher with a proven track record in dismantling online threats. Successfully neutralized 4 scammer networks, thwarted 13 phishing schemes, and disrupted 4 kidnapper networks. Committed to ensuring online safety and security, I leverage my expertise to protect individuals and organizations from digital threats. Passionate about cybersecurity education and empowering others to stay safe online.
