HaxRat - Take Total Control on Android Remotely

HaxRat is a cloud based remote android management suite in simple word it is a Android RAT, powered by NodeJS. It works in Linux and Termux (Android).

Previously we have featured an article on L3MON, HaxRat is based on L3MON but much more powerful then L3MON. It have some extra features like screenshot, screen recording, front and rear camera recording. This is developed by

You Can, Log in or Register To View URLs Content !

. The Key features of HaxRat are following:

Key Features of HaxRat

• Screenshot Capture.
• Screen Recorder.
• Rear Camera Recorder.
• Front Camera Recorder.
• Lock Device.
• GPS Logging.
• Microphone Recording.
• View Contacts.
• SMS Logs.
• Send SMS.
• Call Logs.
• View Installed Apps.
• View Stub Permissions.
• Live Clipboard Logging.
• Live Notification Logging.
• View WiFi Networks (logs previously seen).
• File Explorer & Downloader.
• Command Queuing.
• Built In APK Builder.

We can easily install this suite on Linux , we also can install it on our Android phone by using Termux.

Installing HaxRat on Kali Linux
The installation process is the same as we did in our L3MON tutorial. We have detailed discussion on our that post So we are not going to explain the commands.

First we install JRE in Kali by using following command:

You Can, Log in or Register To View Codes Content !

Then we download NodeJs in our system by applying following command:

You Can, Log in or Register To View Codes Content !

Now we install NodeJs by preceding following command:

You Can, Log in or Register To View Codes Content !

Now we need pm2 process manager to install this we use following command:

You Can, Log in or Register To View Codes Content !

Now we clone haxRat from it's GitHub repository by using following command:

You Can, Log in or Register To View Codes Content !

Then we navigate to server directory under haxRat by using cd command:

You Can, Log in or Register To View Codes Content !

Then we need to install dependencies by using following command:

You Can, Log in or Register To View Codes Content !

Then we start the server by using following command:

You Can, Log in or Register To View Codes Content !

Now we can see our server in our browser

You Can, Log in or Register To View Codes Content !

there will be a login page as following screenshot:

Now we stop this server by using CTRL+C command. Now what to do ? Login ? But where are the credentials? We have talked before how to create a custom credential on our older L3MON tutorial. Otherwise check the

You Can, Log in or Register To View URLs Content !

for default credentials.

After login we can see the main page as shown in the following screenshot:

Now we go to the APK Builder page and give our local IP address and click on build.

If got error like "Wrong java Version installed....." this when building APK then try following command:

You Can, Log in or Register To View Codes Content !

Then Then we type 2 and enter.

Then we stop our running haxRat server by CTRL+C and start it again this problem will be solved.

Now we can build Spy APK and send it to victim, whenever victim install it and grant the permission. Or if we got victim's phone in hand then we can implement this.

We got the victim in our haxRat dashboard like following screenshot:

Now in the manage section we can manage the Android device totally. Magics will start from here.

Installing HaxRat on Android (using Termux)
This is easy to installed in Termux. We try following commands one after another to install and configure haxRat.

You Can, Log in or Register To View Codes Content !

In our browser we navigate to http://<Local IP>:22533 and we will be the login screen of haxRat.

This video by the developer is described how to install haxRat in Termux / Android:

This is how we can start the haxrat server and take control of any android device on our local network. We also can run this on wide network or internet by using

You Can, Log in or Register To View URLs Content !

service.

Disclaimer
Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool or this tutorial.
HaxRat is built and our article is documented for both Educational and Internal use ONLY.

 

===================================
L3MON - Access Android Devices Remotely
===================================