base on Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection . # TheFatRat []() []() []() []() []() [](https://github.com/ManhNho/CEHv10/tree/master/Slides) []() ### A Massive Exploiting Tool  **TheFatRat** is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. **TheFatRat** Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus. ## Information This tool is for educational purpose only, usage of TheFatRat for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. ## Features ! - Fully Automating MSFvenom & Metasploit. - Local or remote listener Generation. - Easily Make Backdoor by category Operating System. - Generate payloads in Various formats. - Bypass anti-virus backdoors. - File pumper that you can use for increasing the size of your files. - The ability to detect external IP & Interface address . - Automatically creates AutoRun files for USB / CDROM exploitation ### But it's shit! And your implementation sucks! - Yes, you're probably correct. Feel free to "Not use it" and there is a pull button to "Make it better". # Installation Instructions on how to install *TheFatRat* ```bash git clone https://github.com/Screetsec/TheFatRat.git cd TheFatRat chmod +x setup.sh && ./setup.sh ``` ### Update ```bash cd TheFatRat ./update && chmod +x setup.sh && ./setup.sh ``` ### Troubleshoot on TheFatRat chk_tools script to use in case of problems in setup.sh of fatrat this script will check if everything is in the right version to run fatrat and will also provide you a solution for the problem ``` cd TheFatRat chmod +x chk_tools ./chk_tools ``` ## Tools Overview | Front View | Sample Feature | | ------------ | ------------ | || ## Documentation - Documentation Available in Modules CEH v9 and V10 , Download source here - [CEHv10 Module 06 System Hacking.pdf](https://github.com/khanhnnvn/CEHv10/blob/master/Labs/CEHv10%20Module%2006%20System%20Hacking.pdf) - [CEHv10 Module 17 Hacking Mobile Platforms.pdf](https://github.com/khanhnnvn/CEHv10/blob/master/Labs/CEHv10%20Module%2017%20Hacking%20Mobile%20Platforms.pdf) - Published in International Journal of Cyber-Security and Digital Forensics - [Malware Analysis Of Backdoor Creator : TheFatRat](https://www.researchgate.net/publication/323574673_MALWARE_ANALYSIS_OF_BACKDOOR_CREATOR_FATRAT) - Youtube Videos - [How To Download & Install TheFatRat](https://www.youtube.com/watch?v=FsSgJFxyzFQ) - [TheFatRat 1.9.6 - Trodebi ( Embed Trojan into Debian Package )](https://www.youtube.com/watch?v=NCsrcqhUBCc&feature=youtu.be&list=PLbyfDadg3caj6nc3KBk375lKWDOjiCmb8) - [hacking windows 10 with TheFatRat](https://www.youtube.com/watch?v=bFXVAXRXE9Q ) - [Hacking Windows using TheFatRat + Apache2 Server + Ettercap + Metasploit](https://www.youtube.com/watch?v=FlXMslSjnGw) - [Hacking with a Microsoft Office Word Document from TheFatRat](https://www.youtube.com/watch?v=lglOXojT84M) - [XSS to powershell attack and bypass Antivirus using BeEF + TheFatRat + Metasploit](https://www.youtube.com/watch?v=pbvg7pgxVjo) - [TheFatRat - Hacking Over WAN - Embedding Payload in Original Android APK - Without Port Forwarding](https://www.youtube.com/watch?v=XLNigYZ5-fM) - [How To Automatically Embed Payloads In APK's - Evil-Droid, Thefatrat & Apkinjector](https://www.youtube.com/watch?v=C_Og6LnEZSg) - [Bind FUD Payload with JPG and Hack over WAN with TheFatRat](https://www.youtube.com/watch?v=VPl1TMCAIy8) ## Changelog All notable changes to this project will be documented in this [file](https://github.com/Screetsec/thefatrat/blob/master/CHANGELOG.md). ### About issues - Read the [document](https://github.com/Screetsec/TheFatRat/blob/master/issues.md) before making an issue ## Alternative Best Tool - Generating Backdoor & Bypass - [Veil-Framework /Veil](https://github.com/Veil-Framework/Veil) - Veil Framework - [Shellter](https://www.shellterproject.com/download/) - Shellter AV Evasion Artware - [Unicorn](https://github.com/trustedsec/unicorn) - Trustedsec - [MSFvenom Payload Creator (MSFPC)](https://github.com/g0tmi1k/msfpc) - g0tmi1k - [Venom](https://github.com/r00t-3xp10it/venom) - Pedro Ubuntu - [Phantom-Evasion](https://github.com/oddcod3/Phantom-Evasion) - Diego Cornacchini ## Credits & Thanks - [Offensive Security](https://www.offensive-security.com/) - Offensive Security - [dracOs Linux](https://dracos-linux.org/) - Penetration Testing OS From Indonesia - [peterpt](https://github.com/peterpt) - Maintainer & Contributor - [Dana James Traversie](https://github.com/dana-at-cp/backdoor-apk) - backdoor_apk - [z0noxz](https://github.com/z0noxz/powerstager) - Powerstager - [TrustedSec](https://github.com/trustedsec/unicorn) - Unicorn - [Raphael Mudge](https://github.com/rsmudge) - External Source - [astr0baby](https://astr0baby.wordpress.com) - Reference Source - [NgeSEC](https://ngesec.id/) Community - [Gauli(dot)Net](https://gauli.net/) - Lab Penetration ## License TheFatRat is made with 🖤 by Edo Maland & All [Contributors](https://github.com/Screetsec/TheFatRat/graphs/contributors). See the **License** file for more details. ", Assign "at most 3 tags" to the expected json: {"id":"883","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"