Add some RATs

[ErezBinyamin]

RATs

Hi. I do cyber sometimes and I like this list. I think it could use some RATs (or RMMs, C2 frameworks, or whatever kids are calling them these days...).

This alphaSeclab/awesome-rat list may be a good start. I have my own RAT list too that is under development that I could suggest, but I'm not a very experienced "open source guy".

• RAT: Remote access tool
• RMM: Remote Management tool
• C2 framework: Command and Control framework

[ErezBinyamin]

Maybe include these RMM lists too?

• 0x706972686f/RMM-Catalogue
• Sketchy Google doc comparing MSPs

[Jelloeater]

I would be careful about including anything that's against the GitHub Tos...

[ErezBinyamin]

You bring up a legitimate concern, and protecting the community and abiding by ToS is a valid priority that I share.

It’s essential to distinguish between sharing potentially harmful executables, which is prohibited, and sharing source code for educational purposes, which is generally permitted.

I believe source code for RATs is very educational to those looking to build their skills. I also believe that identifying those source code example projects in an awesome-list you are a step removed from the source code. Furthermore, source code for a RAT does not violate GitHub ToS.

I'd also like to footstomp that projects like theZoo exist. Live malware repositories that contain genuinely dangerous active malware. A list of RATs should not raise flags

[l16h7n1n6s]

@Jelloeater I wanted to suggest adding some educational open-source libraries that could enhance your project. These libraries are strictly for learning purposes, come with clear and strict legal disclaimers ensuring they’re harmless, and are created by a well-respected developer in the security space.

They offer some interesting insights into cybersecurity. The first simulator shows how you can encrypt/decrypt files in your system and simulates a ransomware, it has also an API for the developers. The second project shows the process to perform DNS spoofing and spread bytecode via DNS, and then hide the process so it would be difficult for antivirus to catch it. I I think they’d be a great fit for your repo. Let me know if you're open to it—I’d be happy to share more details! 😊

Looking forward to your thoughts!

https://github.com/PanagiotisDrakatos/JavaRansomware
https://github.com/PanagiotisDrakatos/RArAtikTdkA

[ErezBinyamin]

@l16h7n1n6s please open a new issue with this idea. This issue is focused on the topic of adding a list of remote-access trojans (RATs)