+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Basic questions about ANDROID RATS (/showthread.php?tid=5917417)
Basic questions about ANDROID RATS - Sheriff1337 - Dec 10, 2018
I hope someone can answer a few questions I have about Android Rats...
1. Is it possible to upload my "App" to the official Google Playstore? (I dont want to send them the apk, instead just open it on the playstore)
2. Do I need to crypt my App? If yes what crypter do you suggest?
3. If user installs my app, does he have to agree to things like GPS, Gallery Features, Camera etc.?
4. Once installed and popping up on my RAT list, will the user see the interactions I make like scrolling through the phone numbers list?
5. Which RAT do you suggest? Looking for a free RAT.
Any help is greatly appreciated. Thank you..
RE: Basic questions about ANDROID RATS - root@HF - Dec 10, 2018
(Dec 10, 2018 05:18 AM)Sheriff1337 Wrote: I hope someone can answer a few questions I have about Android Rats...
1. Is it possible to upload my "App" to the official Google Playstore? (I dont want to send them the apk, instead just open it on the playstore)
2. Do I need to crypt my App? If yes what crypter do you suggest?
3. If user installs my app, does he have to agree to things like GPS, Gallery Features, Camera etc.?
4. Once installed and popping up on my RAT list, will the user see the interactions I make like scrolling through the phone numbers list?
5. Which RAT do you suggest? Looking for a free RAT.
Any help is greatly appreciated. Thank you..
1. u can but its virtually impossible to do so now days. gettin google to accept ur stub u would need to hide it pretty well n make sure there no digital footprints.
2. yes of course u need to crypt. itll be detected otherwise.
3. if user installs app it gains privileges because he installed so u dnt need to manually give the accessibility to the apk.
4. no user doesnt normally see interactions because u dont normally interact with the phone screen more the command line
5. free rats are terrible. i use webmonitor pro enterprise with APK.
hoping that helps <3
RE: Basic questions about ANDROID RATS - Sheriff1337 - Dec 10, 2018
Thank you very much buddy. Sounds good. Ill look inti webmonitor thanks.
RE: Basic questions about ANDROID RATS - CyberError - Dec 10, 2018
(Dec 10, 2018 08:44 AM)Sheriff1337 Wrote: Thank you very much buddy. Sounds good. Ill look inti webmonitor thanks.
Have a Look At OmniRat Too
RE: Basic questions about ANDROID RATS - sh4moon - Dec 10, 2018
(Dec 10, 2018 05:18 AM)Sheriff1337 Wrote: I hope someone can answer a few questions I have about Android Rats...
1. Is it possible to upload my "App" to the official Google Playstore? (I dont want to send them the apk, instead just open it on the playstore)
2. Do I need to crypt my App? If yes what crypter do you suggest?
3. If user installs my app, does he have to agree to things like GPS, Gallery Features, Camera etc.?
4. Once installed and popping up on my RAT list, will the user see the interactions I make like scrolling through the phone numbers list?
5. Which RAT do you suggest? Looking for a free RAT.
Any help is greatly appreciated. Thank you..
1. Yes. It's quite possible. A straight up remote access APK will be harder to hide, but pieces of code that steal data might get missed. Examples:
https://www.wired.com/story/google-play-store-malware/
https://www.businessinsider.com/google-play-store-game-apps-removed-malware-2018-11
2. It's not 100% necessary since a lot of androids don't have antivirus anyway. But it'll help prevent forensic analysis and reverse engineering of your code.
3. Yes, unless you use an exploit. But honestly, how often do people really read and think about the repercussions of giving the app what it needs. Especially when it's in the play store.
4. No they won't. That's kind of the point. It all happens in the background.
5. AhMyth is a pretty good one. Androrat or metasploit framework could also work. Metasploit's payloads I've had some trouble with, but they should work.
4.
(Dec 10, 2018 05:22 AM)Spectacular.blondey Wrote: 1. u can but its virtually impossible to do so now days. gettin google to accept ur stub u would need to hide it pretty well n make sure there no digital footprints.
Lots of people are doing the impossible these days...
https://www.wired.com/story/google-play-store-malware/
https://www.businessinsider.com/google-play-store-game-apps-removed-malware-2018-11
RE: Basic questions about ANDROID RATS - SatoshiSquad - Dec 10, 2018
(Dec 10, 2018 02:30 PM)sh4moon Wrote: 1. Yes. It's quite possible. A straight up remote access APK will be harder to hide, but pieces of code that steal data might get missed. Examples:
https://www.wired.com/story/google-play-store-malware/
https://www.businessinsider.com/google-play-store-game-apps-removed-malware-2018-11
2. It's not 100% necessary since a lot of androids don't have antivirus anyway. But it'll help prevent forensic analysis and reverse engineering of your code.
3. Yes, unless you use an exploit. But honestly, how often do people really read and think about the repercussions of giving the app what it needs. Especially when it's in the play store.
4. No they won't. That's kind of the point. It all happens in the background.
5. AhMyth is a pretty good one. Androrat or metasploit framework could also work. Metasploit's payloads I've had some trouble with, but they should work.
4.
Lots of people are doing the impossible these days...
https://www.wired.com/story/google-play-store-malware/
https://www.businessinsider.com/google-play-store-game-apps-removed-malware-2018-11
Thank you for the answers, I've been interested in Android RATs myself. In your view, how difficult would it be to fit remote access malware into the google play store? Perhaps, it'd have to be related to an app that is intentionally for remote access, similar to a teamviewer mobile app.
RE: Basic questions about ANDROID RATS - CyberStrike - Dec 10, 2018
I think question 1 really needs more than the cleanup of some malware articles. It happens but be ready to invest a bit :
https://play.google.com/about/developer-distribution-agreement.html
https://support.google.com/googleplay/android-developer/answer/113469?hl=en
Google Play Protect now scans of malicious urls and other things (you will need to do your research), mobile AV's are generally not to spectacular. I would really say that you will need your OWN infrastructure, like this isn't something you would do from home because you can quickly find multiple installs you didn't bargain for, also while it appears that you can sign with a self signed cert mm I would say that is fine to a point, also I would say have a working app.
https://support.google.com/accounts/answer/2812853?hl=en
3rd party sites are also an option the real trick though is once again Google Play Protect checks these apps.