screetsec / TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
GNU General Public License v3.0
9.5k stars 2.27k forks source link

Why? #121

Closed georgy7 closed 7 years ago

georgy7 commented 7 years ago

Why you've made the software that make backdoors & malware? What was your motivation?

peterpt commented 7 years ago

see it om a different perspective .

At least this is free , and everyone can access it , even antivirus builders , while there are other entities that build more dangerous malware than us .

Fatrat can be used for you to test your network security (windows , linux) and by looking how the rats works you can develop counter measures .

Fatrat can be used for good , like if you want to connect to a remote station , the rats will only connect to a specific ip or domain , and will not be opened to everyone on the web .

Fatrat is a remote administrative tool , which it can not be considered 100% malware , however depending on the use you give to it , it can be used as malware . I personally never ever test fatrat outside my lan , or even infected anyone with a rat made by me in fatrat .

You can see the negative point of this tool , but if you want you can also see the positive point of it . At least fatrat backdoors are not builded to encrypt all your data like the latest "wannacry" Ransomware . https://en.wikipedia.org/wiki/WannaCry_ransomware_attack

georgy7 commented 7 years ago

Okay. Thanks for your response.

enkeyz commented 7 years ago

It's a really good software for pentesters, ethical hackers. No need to tinker, just run this script. Saves a lot of time.

peterpt commented 7 years ago

The use of this tool is total responsibility of the user , we expect that this tool can be use more for good than bad . However and i believe that is important to write here that fatrat is just a script that use multiple tools not originally made by us . The main engine of fatrat is Metasploit framework , and then we use other tools additionally made by other users on github . The readme file of fatrat is very explicit on that .