Awesome Open Source
Awesome Open Source

License CircleCI Go Report Card Docker Cloud Build Status

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.




How to use ToRat Docker Image


Client Commands

Command Status Info
cd Working change the working directory of the client
ls Working list the content of the working directory of the client
shred Working delete files/ directories unrecoverable
screen Working take a Screenshot of the client
cat Working view Textfiles from the client including .docx, .rtf, .pdf, .odt
alias Working give the client a custom alias
down Working download a file from the client
up Working upload a file to the client
speedtest Working speedtest a client's internet connection
hardware Working collects a variety of hardware specs from the client
netscan Working scans a clients entire network for online devices and open ports
gomap Working scan a local ip on a clients network for open ports and services
escape Working escape a command and run it in a native shell on the client
reconnect Not Working tell the client to reconnect
help Working lists possible commands with usage info
exit Working background current session and return to main shell

Server Commands

Command Status Info
select Working select client to interact with
list Working list all connected clients
alias Working select client to give an alias
cd Working change the working directory of the server
help Working lists possible commands with usage info
exit Working exit the server

Current Features


  • RPC (Remote procedure Call) based communication for easy addition of new functionality
  • Automatic upx leads to client binaries of ~6MB with embedded Tor
  • sqlite via gorm for storing information about the clients
  • client is obfuscated via garble

Server Shell

  • Cross Platform reverse shell (Windows, Linux, Mac OS)

  • Supports multiple connections

  • Welcome Banner

  • Colored Output

  • Tab-Completion of:

    • Commands
    • Files/ Directories in the working directory of the server
  • Unique persistent ID for every client

    • give a client an Alias
    • all Downloads from client get saved to ./$ID/$filename


  • Windows:

    • [ ] Multiple User Account Control Bypasses (Privilege escalation)
    • [ ] Multiple Persistence methods (User, Admin)
  • Linux:

    • [ ] Multiple Persistence methods (User, Admin)


  • Fully embedded Tor within go

  • the ToRAT_client communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)

    • [x] anonymity of client and server
    • [x] end-to-end encryption
  • optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP

    • [x] smaller binary ~3MB upx'ed
    • [ ] anonymity of client and server

Upcoming Features


All contributions are welcome you don't need to be an expert in Go to contribute.


Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
go (14,916
golang (3,811
linux (2,457
windows (1,434
cross-platform (684
rpc (280
tor (119
persistence (74
payload (71
rat (62
post-exploitation (54
keylogger (50
reverse-shell (48
privilege-escalation (43
transport (39
remote-admin-tool (27