HaxRat -- Take Total Control on Android Remotely

HaxRat is a cloud based remote android management suite in simple word it is a Android RAT, powered by NodeJS. It works in Linux and Termux (Android).

haxrat github tool made by hax4us control android remotely
Previously we have featured an article on L3MON, HaxRat is based on L3MON but much more powerful then L3MON. It have some extra features like screenshot, screen recording, front and rear camera recording. This is developed by Hax4us (Lokesh Pandey). The Key features of HaxRat are following:

Key Features of HaxRat

  • Screenshot Capture.
  • Screen Recorder.
  • Rear Camera Recorder.
  • Front Camera Recorder.
  • Lock Device.
  • GPS Logging.
  • Microphone Recording.
  • View Contacts.
  • SMS Logs.
  • Send SMS.
  • Call Logs.
  • View Installed Apps.
  • View Stub Permissions.
  • Live Clipboard Logging.
  • Live Notification Logging.
  • View WiFi Networks (logs previously seen).
  • File Explorer & Downloader.
  • Command Queuing.
  • Built In APK Builder.
We can easily install this suite on Linux , we also can install it on our Android phone by using Termux.

Installing HaxRat on Kali Linux

The installation process is the same as we did in our L3MON tutorial. We have detailed discussion on our that post So we are not going to explain the commands.

First we install JRE in Kali by using following command:
sudo apt-get install openjdk-8-jre
Then we download NodeJs in our system by applying following command:
curl -sL https://deb.nodesource.com/setup_13.x | sudo bash -
Now we install NodeJs by preceding following command:
sudo apt-get install -y nodejs
Now we need pm2 process manager to install this we use following command:
sudo npm install pm2 -g
Now we clone haxRat from it's GitHub repository by using following command:
git clone https://github.com/Hax4us/haxRat
Then we navigate to server directory under haxRat by using cd command:
cd /haxRat/server
Then we need to install dependencies by using following command:
npm install
Then we start the server by using following command:
node index.js
Now we can see our server in our browser http://localhost:22533 there will be a login page as following screenshot:

haxrat login panel

Now we stop this server by using CTRL+C command. Now what to do ? Login ? But where are the credentials?  We have talked before how to create a custom credential on our older L3MON tutorial. Otherwise check the haxRat GitHub repository for default credentials.

After login we can see the main page as shown in the following screenshot:

haxrat dashboard termux

Now we go to the APK Builder page and give our local IP address and click on build.

If got  error like "Wrong java Version installed....." this when building APK then try following command:
sudo update-alternatives --config java
Then Then we type 2 and enter.

Then we stop our running haxRat server by CTRL+C and start it again this problem will be solved.

Now we can build Spy APK and send it to victim, whenever victim install it and grant the permission. Or if we got victim's phone in hand then we can implement this.

We got the victim in our haxRat dashboard like following screenshot:


haxrat dashboard

Now in the manage section we can manage the Android device totally. Magics will start from here.

Installed Android Apps
File Manager
Recording from front Camera

Installing HaxRat on Android (using Termux)

This is easy to installed in Termux. We try following commands one after another to install and configure haxRat.
apt install nodejs
git clone https://github.com/hax4us/haxRat.git
cd haxRat/server
npm install
mkdir ~/haxrat
haxrat
node index.js
In our browser we navigate to http://<Local IP>:22533 and we will be the login screen of haxRat.

This video by the developer is described how to install haxRat in Termux / Android:


This is how we can start the haxrat server and take control of any android device on our local network. We also can run this on wide network or internet by using PortMap service.

Disclaimer

Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool or this tutorial.
HaxRat is built and our article is documented for both Educational and Internal use ONLY
.

Getting any problem during installing or configuring HaxRat ? Feel free to contact us by commenting with error details on below comment section or on the YouTube video this video is uploaded by the developer himself. For more tutorials like this subscribe our newsletter to get updated. Also we post updates on our Twitter and Medium make sure to follow us there.
author-img
Kali Linux

Comments

29 comments
Post a Comment
  • anonymus photo
    anonymusJuly 16, 2020 at 1:16 AM

    FOR DEFAULT PASSWORD WE HAVE TO DOWNLOAD FILE?

    Delete Comment
    • Kali Linux photo
      Kali LinuxJuly 16, 2020 at 2:00 AM

      You may, otherwise you can try another method and generate your custom username and password . Go to our L3MON tutorial. This tool is based on L3MON so that will work finely.

      Delete Comment
      • Unknown photo
        UnknownJanuary 7, 2021 at 5:55 PM

        Can we use 22222 in haxrat aswell??

        Delete Comment
        • Kali Linux photo
          Kali LinuxJanuary 8, 2021 at 8:57 AM

          You can use any port number for it.

          Delete Comment
        • blogger photo
          bloggerAugust 1, 2020 at 7:25 PM

          nice tool admin,can you please post how to make pdf or a picture backdoor for android

          Delete Comment
        • Unknown photo
          UnknownAugust 12, 2020 at 12:26 PM

          please need help
          when installling "sudo npm install pm2 -g"
          i receive this messagge:"sudo: npm : commande introuvable"

          Delete Comment
          • Kali Linux photo
            Kali LinuxAugust 12, 2020 at 2:07 PM

            The npm file should be in /usr/local/bin/npm. If it's not there, install node.js again.

            Delete Comment
            • Unknown photo
              UnknownAugust 15, 2020 at 11:06 PM

              I TRIED TO REINSTALL NODE.JS.BUT THE PROBLEM IS THE SAME AND I GOT THE SAME MESSAGE(npm command not found)
              my system is windows 7 32bit thanks

              Delete Comment
              • Kali Linux photo
                Kali LinuxAugust 16, 2020 at 5:07 AM

                We suggest you to to to the official page of nmp and follow the instructions.

                Delete Comment
              • Unknown photo
                UnknownAugust 18, 2020 at 9:06 PM

                unable to open java -jar /root/haxRat/server/app/factory/apktoll.jar...when i was trying to building payload

                Delete Comment
                • Kali Linux photo
                  Kali LinuxAugust 19, 2020 at 10:45 PM

                  To solve this we need full information that how you have installed it. We suggest a re-install for more details try the video. We think that apktool.jar file is missing from it's path or you might forgot to use sudo.

                  Delete Comment
                • Yudip upreti photo
                  Yudip upretiAugust 28, 2020 at 6:01 PM

                  Please help me to fix bash: cd: /haxRat/server: No such file or directory

                  Delete Comment
                  • Kali Linux photo
                    Kali LinuxAugust 28, 2020 at 6:29 PM

                    Did you cloned haxRat from github. We think you need to do it again and follow our instructions carefully and you need to be in the right directory. Is says that you don't have these directory in our system, so please check it by ls command.

                    Delete Comment
                  • AnonymousSeptember 20, 2020 at 3:55 PM

                    can I use ngrok for port forwarding?

                    Delete Comment
                    • Kali Linux photo
                      Kali LinuxSeptember 20, 2020 at 5:45 PM

                      Yes, we can but the author of this tool suggest to use portmap services.

                      Delete Comment
                    • AnonymousSeptember 28, 2020 at 1:16 PM

                      bro,
                      please make give detail information about QRLJACKING.
                      bro your content is awesome...

                      Delete Comment
                      • Kali Linux photo
                        Kali LinuxSeptember 28, 2020 at 5:25 PM

                        Okey we will do a qrljacking tutorial but after some time, because we are working with some awesome contents. Thanks for your suggestion.

                        Delete Comment
                      • Unknown photo
                        UnknownOctober 28, 2020 at 8:53 PM

                        the target phone will not connect. neither will mine. ive downloaded the apk and everything is there but i cant seem to get anything further than the download..please advise

                        Delete Comment
                        • Kali Linux photo
                          Kali LinuxOctober 29, 2020 at 7:59 AM

                          Tell us something about your connections. Which IP you have provided in APK building?

                          Delete Comment
                        • AnonymousNovember 6, 2020 at 5:32 PM

                          https://pastebin.com/PG8nuYXv

                          Defualt password is haxratserver

                          Delete Comment
                          • AnonymousNovember 30, 2020 at 9:28 AM

                            Do you have complete tutorial setting portmap to use haxRAT over internet?
                            Is the localhost:xxxx port is the port I should fill on the app builder?
                            I've tried many times, but has no luck
                            Thankyou

                            Delete Comment
                            • Kali Linux photo
                              Kali LinuxNovember 30, 2020 at 1:56 PM

                              We did not tried it. But the developer of this tool told that he connects it with portmap and it works well.

                              Delete Comment
                            • AnonymousNovember 30, 2020 at 9:29 AM

                              Is it possible the app we built using haxRAT accesible by others hackers?

                              Delete Comment
                            • AnonymousDecember 9, 2020 at 4:35 PM

                              this is the error i get when i configure java
                              There is only one alternative in link group java (providing /usr/bin/java): /usr/lib/jvm/java-11-openjdk-amd64/bin/java
                              Nothing to configure.

                              Delete Comment
                              • Kali Linux photo
                                Kali LinuxDecember 9, 2020 at 5:53 PM

                                It's looks like you doesn't have installed Java in your system. Try following command to install it and follow the tutorial then:

                                sudo apt-get install openjdk-8-jdk

                                Delete Comment
                              • irfan photo
                                irfanJanuary 15, 2021 at 2:11 AM

                                Hi I was tried the browser it's say bad login the all is ok admin and password I write and see bad login i use chrome and android mia3

                                Delete Comment
                              google-playkhamsatmostaqltradent