Offensive Security Tool: TheFatRat

Reading Time: 3 Minutes

Offensive Security Tool: TheFatRat

GitHub Link

TheFatRat

A Massive Exploiting Tool

TheFatRat by Edo Maland, is an exploiting tool which compiles a malware with famous payload, and then the compiled malware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus.

Creating an FUD is a very effective way that hackers & pentesters gain access aggressively, with code that can execute in memory without touching disk and requires a lot of understanding on how to work with a payload before generating it, depending how it will be configured, and after its compiled using techniques like file pumper, increasing the size to such it can be merged with a setup program file, and part of a social engineered attack, along with its unique signature generated each time uniquely, and tested against AV engines, before being delivered. Can also be integrated in some USB Drives on their controller, which even if formatted, it will reside. (Like RubberDucky).

Features

• Fully Automating MSFvenom & Metasploit.
• Local or remote listener Generation.
• Easily Make Backdoor by category Operating System.
• Generate payloads in Various formats.
• Bypass anti-virus backdoors.
• File pumper that you can use for increasing the size of your files.
• The ability to detect external IP & Interface address .
• Automatically creates AutoRun files for USB / CDROM exploitation

Installation

Instructions on how to install TheFatRat

git clone https://github.com/Screetsec/TheFatRat.git
cd TheFatRat
chmod +x setup.sh && ./setup.sh

Update

cd TheFatRat
./update && chmod +x setup.sh && ./setup.sh

Tools Overview

Documentation

• Documentation Available in Modules CEH v9 and V10 , Download source here
  • CEHv10 Module 06 System Hacking.pdf
  • CEHv10 Module 17 Hacking Mobile Platforms.pdf
• Published in International Journal of Cyber-Security and Digital Forensics
  • Malware Analysis Of Backdoor Creator : TheFatRat
• Youtube Videos
  • How To Download & Install TheFatRat
  • TheFatRat 1.9.6 – Trodebi ( Embed Trojan into Debian Package )
  • hacking windows 10 with TheFatRat
  • Hacking Windows using TheFatRat + Apache2 Server + Ettercap + Metasploit
  • Hacking with a Microsoft Office Word Document from TheFatRat
  • XSS to powershell attack and bypass Antivirus using BeEF + TheFatRat + Metasploit
  • TheFatRat – Hacking Over WAN – Embedding Payload in Original Android APK – Without Port Forwarding
  • How To Automatically Embed Payloads In APK’s – Evil-Droid, Thefatrat & Apkinjector
  • Bind FUD Payload with JPG and Hack over WAN with TheFatRat

Changelog

All notable changes to this project will be documented in this file.

About issues

• Read the document before making an issue