Popularity

7.5

Stable

Activity

0.0

Declining

Stars 852

Watchers 37

Forks 185

Last Commit about 1 year ago

Description

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.

Programming language: Go

License: The Unlicense

Tags: Security Networking Go

ToRat alternatives and similar packages

Based on the "Security" category.
Alternatively, view ToRat alternatives based on common mentions on social networks and blogs.

Lean and Mean Docker containers

9.8 9.1 ToRat VS Lean and Mean Docker containers

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
age

9.7 5.5 ToRat VS age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

Promo www.influxdata.com

lego

9.4 8.9 ToRat VS lego

Let's Encrypt/ACME client and library written in Go
autocert

9.2 8.1 ToRat VS autocert

[mirror] Go supplementary cryptography libraries
CertMagic

9.0 7.7 ToRat VS CertMagic

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
Cameradar

8.9 3.4 ToRat VS Cameradar

Cameradar hacks its way into RTSP videosurveillance cameras
memguard

8.3 4.2 ToRat VS memguard

Secure software enclave for storage of sensitive information in memory.
secure

8.2 3.4 ToRat VS secure

HTTP middleware for Go that facilitates some quick security wins.
acmetool

8.1 0.0 ToRat VS acmetool

:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
Coraza

8.0 8.7 ToRat VS Coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Themis by Cossack Labs

8.0 5.9 L3 ToRat VS Themis by Cossack Labs

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
acra

7.7 6.8 ToRat VS acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
dongle

7.1 2.9 ToRat VS dongle

A simple, semantic and developer-friendly golang package for encoding&decoding and encryption&decryption
Topaz

7.1 9.5 ToRat VS Topaz

Cloud-native authorization for modern applications and APIs
nacl

6.5 0.0 ToRat VS nacl

Pure Go implementation of the NaCL set of API's
beelzebub

6.5 8.1 ToRat VS beelzebub

A secure low code honeypot framework, leveraging AI for System Virtualization.
go-yara

6.5 5.9 ToRat VS go-yara

Go bindings for YARA
booster

6.3 6.3 ToRat VS booster

Fast and secure initramfs generator
go-password-validator

6.3 0.0 ToRat VS go-password-validator

Validate the Strength of a Password in Go
ssh-vault

6.2 7.9 ToRat VS ssh-vault

🌰 encrypt/decrypt using ssh keys
optimus-go

5.9 0.0 ToRat VS optimus-go

ID hashing and Obfuscation using Knuth's Algorithm
firewalld-rest

5.8 0.0 ToRat VS firewalld-rest

A rest application to update firewalld rules on a linux server
passlib

5.7 0.0 ToRat VS passlib

:key: Idiotproof golang password validation library inspired by Python's passlib
BadActor

5.7 0.0 ToRat VS BadActor

BadActor.org An in-memory application driven jailer written in Go
teler-waf

5.6 9.3 ToRat VS teler-waf

teler-waf is a Go HTTP middleware that provides teler IDS functionality.
bitwarden-go

5.5 0.0 ToRat VS bitwarden-go

A Bitwarden-compatible server written in Golang
simple-scrypt

5.2 0.0 ToRat VS simple-scrypt

A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑
go-peer

5.1 9.8 ToRat VS go-peer

A software library for creating secure and anonymous decentralized systems. Confirmed by theoretical works — "Theory of the structure of hidden systems", "Monolithic cryptographic protocol", "Abstract anonymous networks", "Decentralized key exchange protocol".
argon2pw

3.9 0.0 ToRat VS argon2pw

Argon2 password hashing package for go with constant time hash comparison
goSecretBoxPassword

3.2 0.0 ToRat VS goSecretBoxPassword

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
go-generate-password

2.9 0.0 ToRat VS go-generate-password

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
go-htpasswd

2.8 3.8 ToRat VS go-htpasswd

Apache htpasswd Parser for Go.
passwap

2.6 7.2 ToRat VS passwap

Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
certificates

2.6 0.0 ToRat VS certificates

An opinionated helper for generating tls certificates
Credman

2.5 0.0 ToRat VS Credman

Simple and secure credential/password management with extra steps in Go!
secureio

2.4 0.0 ToRat VS secureio

An easy-to-use XChaCha20-encryption wrapper for io.ReadWriteCloser (even lossy UDP) using ECDH key exchange algorithm, ED25519 signatures and Blake3+Poly1305 checksums/message-authentication for Go (golang). Also a multiplexer.
sslmgr

2.2 0.0 ToRat VS sslmgr

A layer of abstraction the around acme/autocert certificate manager (Golang)
go-acl

1.9 0.0 ToRat VS go-acl

Go support for Access Control Lists
garble

1.8 8.2 ToRat VS garble

*fork* of https://github.com/burrowers/garble
secret

1.8 1.8 ToRat VS secret

Prevent your secrets from leaking into logs, std* etc.
goArgonPass

1.8 0.0 ToRat VS goArgonPass

goArgonPass is a Argon2 Password utility package for Go using the crypto library package Argon2 designed to be compatible with Passlib for Python and Argon2 PHP. Argon2 was the winner of the most recent Password Hashing Competition. This is designed for use anywhere password hashing and verification might be needed and is intended to replace implementations using bcrypt or Scrypt.
argon2-hashing

1.7 4.2 ToRat VS argon2-hashing

A light package for generating and comparing password hashing with argon2 in Go
ACL

0.6 0.0 ToRat VS ACL

A simple but powerful Access Control List manager
Go random string generator

0.4 0.0 ToRat VS Go random string generator

Flexible and customizable random string generator
Interpol

- - ToRat VS Interpol

Rule-based data generator for fuzzing and penetration testing.

* Code Quality Rankings and insights are calculated and provided by Lumnify.
They vary from L1 to L5 with "L5" being the highest.

Do you think we are missing an alternative of ToRat or a related project?

Add another 'Security' Package

Popular Comparisons

README

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.

DISCLAIMER

USE FOR EDUCATIONAL PURPOSES ONLY

Wiki

How to use ToRat Docker Image

Preview

Client Commands

Command	Info
cd	change the working directory of the client
ls	list the content of the working directory of the client
shred	delete files/ directories unrecoverable
screen	take a Screenshot of the client
cat	view Textfiles from the client including .docx, .rtf, .pdf, .odt
alias	give the client a custom alias
down	download a file from the client
up	upload a file to the client
speedtest	speedtest a client's internet connection
hardware	collects a variety of hardware specs from the client
netscan	scans a clients entire network for online devices and open ports
gomap	scan a local ip on a clients network for open ports and services
escape	escape a command and run it in a native shell on the client
reconnect	tell the client to reconnect
help	lists possible commands with usage info
exit	background current session and return to main shell

Server Commands

Command	Info
select	select client to interact with
list	list all connected clients
alias	select client to give an alias
cd	change the working directory of the server
help	lists possible commands with usage info
exit	exit the server

Current Features

Architecture

RPC (Remote procedure Call) based communication for easy addition of new functionality
Automatic upx leads to client binaries of ~6MB with embedded Tor
sqlite via gorm for storing information about the clients
client is obfuscated via garble

Server Shell

Cross Platform reverse shell (Windows, Linux, Mac OS)
Supports multiple connections
Welcome Banner
Colored Output
Tab-Completion of:
- Commands
- Files/ Directories in the working directory of the server
Unique persistent ID for every client
- give a client an Alias
- all Downloads from client get saved to ./$ID/$filename

Persistence

Windows:
- [ ] Multiple User Account Control Bypasses (Privilege escalation)
- [ ] Multiple Persistence methods (User, Admin)
Linux:
- [ ] Multiple Persistence methods (User, Admin)

Tor

Fully embedded Tor within go
the ToRAT_client communicates over TLS encrypted RPC proxied through Tor with the ToRat_server (hidden service)
- [x] anonymity of client and server
- [x] end-to-end encryption
optional transport without Tor e.g. Use Tor2Web, a DNS Hostname or public/ local IP
- [x] smaller binary ~3MB upx'ed
- [ ] anonymity of client and server

Upcoming Features

[ ] Bulk Commands
[ ] Persistence and privilege escalation for Linux
[ ] Persistence and privilege escalation for Mac OS
[ ] Support for Android and iOS (needs fix of https://github.com/ipsn/go-libtor/issues/12)
[ ] File-less Persistence on Windows

Contribution

All contributions are welcome you don't need to be an expert in Go to contribute.

You may want to join the #torat channel over at the Gophers Slack

Credits

*Note that all licence references and agreements mentioned in the ToRat README section above are relevant to that project's source code only.

ToRat

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication