This blog is NOT OFFICIAL website of Kali Linux. We just share Tutorials to learn Cybersecurity.

HaxRat -- Take Total Control on Android Remotely

Home
HaxRat is a cloud based remote android management suite in simple word it is a Android RAT, powered by NodeJS. It works in Linux and Termux (Android).

haxrat github tool made by hax4us control android remotely
Previously we have featured an article on L3MON, HaxRat is based on L3MON but much more powerful then L3MON. It have some extra features like screenshot, screen recording, front and rear camera recording. This is developed by Hax4us (Lokesh Pandey). The Key features of HaxRat are following:

Key Features of HaxRat

  • Screenshot Capture.
  • Screen Recorder.
  • Rear Camera Recorder.
  • Front Camera Recorder.
  • Lock Device.
  • GPS Logging.
  • Microphone Recording.
  • View Contacts.
  • SMS Logs.
  • Send SMS.
  • Call Logs.
  • View Installed Apps.
  • View Stub Permissions.
  • Live Clipboard Logging.
  • Live Notification Logging.
  • View WiFi Networks (logs previously seen).
  • File Explorer & Downloader.
  • Command Queuing.
  • Built In APK Builder.
We can easily install this suite on Linux , we also can install it on our Android phone by using Termux.

Installing HaxRat on Kali Linux

The installation process is the same as we did in our L3MON tutorial. We have detailed discussion on our that post So we are not going to explain the commands.

First we install JRE in Kali by using following command:
sudo apt-get install openjdk-8-jre
Then we download NodeJs in our system by applying following command:
curl -sL https://deb.nodesource.com/setup_13.x | sudo bash -
Now we install NodeJs by preceding following command:
sudo apt-get install -y nodejs
Now we need pm2 process manager to install this we use following command:
sudo npm install pm2 -g
Now we clone haxRat from it's GitHub repository by using following command:
git clone https://github.com/Hax4us/haxRat
Then we navigate to server directory under haxRat by using cd command:
cd /haxRat/server
Then we need to install dependencies by using following command:
npm install
Then we start the server by using following command:
node index.js
Now we can see our server in our browser http://localhost:22533 there will be a login page as following screenshot:

haxrat login panel

Now we stop this server by using CTRL+C command. Now what to do ? Login ? But where are the credentials?  We have talked before how to create a custom credential on our older L3MON tutorial. Otherwise check the haxRat GitHub repository for default credentials.

After login we can see the main page as shown in the following screenshot:

haxrat dashboard termux

Now we go to the APK Builder page and give our local IP address and click on build.

If got  error like "Wrong java Version installed....." this when building APK then try following command:
sudo update-alternatives --config java
Then Then we type 2 and enter.

Then we stop our running haxRat server by CTRL+C and start it again this problem will be solved.

Now we can build Spy APK and send it to victim, whenever victim install it and grant the permission. Or if we got victim's phone in hand then we can implement this.

We got the victim in our haxRat dashboard like following screenshot:


haxrat dashboard

Now in the manage section we can manage the Android device totally. Magics will start from here.

Installed Android Apps
File Manager
Recording from front Camera

Installing HaxRat on Android (using Termux)

This is easy to installed in Termux. We try following commands one after another to install and configure haxRat.
apt install nodejs
git clone https://github.com/hax4us/haxRat.git
cd haxRat/server
npm install
mkdir ~/haxrat
haxrat
node index.js
In our browser we navigate to http://<Local IP>:22533 and we will be the login screen of haxRat.

This video by the developer is described how to install haxRat in Termux / Android:


This is how we can start the haxrat server and take control of any android device on our local network. We also can run this on wide network or internet by using PortMap service.

Disclaimer

Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool or this tutorial.
HaxRat is built and our article is documented for both Educational and Internal use ONLY
.

Getting any problem during installing or configuring HaxRat ? Feel free to contact us by commenting with error details on below comment section or on the YouTube video this video is uploaded by the developer himself. For more tutorials like this subscribe our newsletter to get updated. Also we post updates on our Twitter and Medium make sure to follow us there.
author-img
Kali Linux

Comments

65 comments
Post a Comment
  • anonymus photo
    anonymusJuly 16, 2020 at 1:16 AM

    FOR DEFAULT PASSWORD WE HAVE TO DOWNLOAD FILE?

    Delete Comment
    • Kali Linux photo
      Kali LinuxJuly 16, 2020 at 2:00 AM

      You may, otherwise you can try another method and generate your custom username and password . Go to our L3MON tutorial. This tool is based on L3MON so that will work finely.

      Delete Comment
      • Unknown photo
        UnknownJanuary 7, 2021 at 5:55 PM

        Can we use 22222 in haxrat aswell??

        Delete Comment
        • Kali Linux photo
          Kali LinuxJanuary 8, 2021 at 8:57 AM

          You can use any port number for it.

          Delete Comment
          • Unknown photo
            UnknownFebruary 27, 2021 at 4:50 PM

            this specific command is not working in kali linux virtual box

            sudo npm install pm2 -g

            it says sudo: npm: comand not found please help me asap because i haven't progressed after getting stuck at this command

            Delete Comment
            • Kali Linux photo
              Kali LinuxFebruary 28, 2021 at 12:13 PM

              This problem comes because you don't have npm. You need to install it by using following command:

              sudo apt-get install npm

              Thanks.

              Delete Comment
              • Aayush SC photo
                Aayush SCMarch 6, 2021 at 9:07 AM

                which kali linux ios build are you using , my laptop is 64bit , i want to know which is the best bild where i can use these penetration tests ,there are many builds where L3MON and HAXRAT dose'nt work.

                Delete Comment
                • Shinbe photo
                  ShinbeDecember 4, 2021 at 1:58 PM

                  i tried to use some function such as lock, screenshot, screenrecord ... but it doesnt work

                  Delete Comment
                  • Kali Linux photo
                    Kali LinuxDecember 4, 2021 at 7:15 PM

                    Hello Shinnbe, We are sorry for that is not working. I had talked personally to the developer of haxrat. He says me that he didn't getting time to update this tool, may be he discontinued this project and archive this.

                    Delete Comment
                    • AnonymousMay 2, 2023 at 6:18 PM

                      does this tool works anymore? tried, but no device number or anything. used portmap service to hide but nothing works.

                      Delete Comment
                      • AnonymousMay 5, 2023 at 10:03 PM

                        You are right. These kind of tools are not available on public now. They made it paid tools now.

                        Delete Comment
                        • AnonymousJuly 25, 2023 at 11:21 PM

                          If we build an apk file, can we use it to attack on several devices?

                          Delete Comment
                        • blogger photo
                          bloggerAugust 1, 2020 at 7:25 PM

                          nice tool admin,can you please post how to make pdf or a picture backdoor for android

                          Delete Comment
                        • Unknown photo
                          UnknownAugust 12, 2020 at 12:26 PM

                          please need help
                          when installling "sudo npm install pm2 -g"
                          i receive this messagge:"sudo: npm : commande introuvable"

                          Delete Comment
                          • Kali Linux photo
                            Kali LinuxAugust 12, 2020 at 2:07 PM

                            The npm file should be in /usr/local/bin/npm. If it's not there, install node.js again.

                            Delete Comment
                            • Unknown photo
                              UnknownAugust 15, 2020 at 11:06 PM

                              I TRIED TO REINSTALL NODE.JS.BUT THE PROBLEM IS THE SAME AND I GOT THE SAME MESSAGE(npm command not found)
                              my system is windows 7 32bit thanks

                              Delete Comment
                              • Kali Linux photo
                                Kali LinuxAugust 16, 2020 at 5:07 AM

                                We suggest you to to to the official page of nmp and follow the instructions.

                                Delete Comment
                              • Unknown photo
                                UnknownAugust 18, 2020 at 9:06 PM

                                unable to open java -jar /root/haxRat/server/app/factory/apktoll.jar...when i was trying to building payload

                                Delete Comment
                                • Kali Linux photo
                                  Kali LinuxAugust 19, 2020 at 10:45 PM

                                  To solve this we need full information that how you have installed it. We suggest a re-install for more details try the video. We think that apktool.jar file is missing from it's path or you might forgot to use sudo.

                                  Delete Comment
                                • Yudip upreti photo
                                  Yudip upretiAugust 28, 2020 at 6:01 PM

                                  Please help me to fix bash: cd: /haxRat/server: No such file or directory

                                  Delete Comment
                                  • Kali Linux photo
                                    Kali LinuxAugust 28, 2020 at 6:29 PM

                                    Did you cloned haxRat from github. We think you need to do it again and follow our instructions carefully and you need to be in the right directory. Is says that you don't have these directory in our system, so please check it by ls command.

                                    Delete Comment
                                  • AnonymousSeptember 20, 2020 at 3:55 PM

                                    can I use ngrok for port forwarding?

                                    Delete Comment
                                    • Kali Linux photo
                                      Kali LinuxSeptember 20, 2020 at 5:45 PM

                                      Yes, we can but the author of this tool suggest to use portmap services.

                                      Delete Comment
                                    • AnonymousSeptember 28, 2020 at 1:16 PM

                                      bro,
                                      please make give detail information about QRLJACKING.
                                      bro your content is awesome...

                                      Delete Comment
                                      • Kali Linux photo
                                        Kali LinuxSeptember 28, 2020 at 5:25 PM

                                        Okey we will do a qrljacking tutorial but after some time, because we are working with some awesome contents. Thanks for your suggestion.

                                        Delete Comment
                                      • Unknown photo
                                        UnknownOctober 28, 2020 at 8:53 PM

                                        the target phone will not connect. neither will mine. ive downloaded the apk and everything is there but i cant seem to get anything further than the download..please advise

                                        Delete Comment
                                        • Kali Linux photo
                                          Kali LinuxOctober 29, 2020 at 7:59 AM

                                          Tell us something about your connections. Which IP you have provided in APK building?

                                          Delete Comment
                                        • AnonymousNovember 6, 2020 at 5:32 PM

                                          https://pastebin.com/PG8nuYXv

                                          Defualt password is haxratserver

                                          Delete Comment
                                        • AnonymousNovember 30, 2020 at 9:28 AM

                                          Do you have complete tutorial setting portmap to use haxRAT over internet?
                                          Is the localhost:xxxx port is the port I should fill on the app builder?
                                          I've tried many times, but has no luck
                                          Thankyou

                                          Delete Comment
                                          • Kali Linux photo
                                            Kali LinuxNovember 30, 2020 at 1:56 PM

                                            We did not tried it. But the developer of this tool told that he connects it with portmap and it works well.

                                            Delete Comment
                                          • AnonymousNovember 30, 2020 at 9:29 AM

                                            Is it possible the app we built using haxRAT accesible by others hackers?

                                            Delete Comment
                                          • AnonymousDecember 9, 2020 at 4:35 PM

                                            this is the error i get when i configure java
                                            There is only one alternative in link group java (providing /usr/bin/java): /usr/lib/jvm/java-11-openjdk-amd64/bin/java
                                            Nothing to configure.

                                            Delete Comment
                                            • Kali Linux photo
                                              Kali LinuxDecember 9, 2020 at 5:53 PM

                                              It's looks like you doesn't have installed Java in your system. Try following command to install it and follow the tutorial then:

                                              sudo apt-get install openjdk-8-jdk

                                              Delete Comment
                                            • irfan photo
                                              irfanJanuary 15, 2021 at 2:11 AM

                                              Hi I was tried the browser it's say bad login the all is ok admin and password I write and see bad login i use chrome and android mia3

                                              Delete Comment
                                            • AnonymousFebruary 4, 2021 at 1:07 PM

                                              I installed the app in victims phone but after some time connection got lost and never got back

                                              Delete Comment
                                              • Kali Linux photo
                                                Kali LinuxFebruary 4, 2021 at 5:26 PM

                                                This happens with everyone. You need to make a persistence backdoor inside the phone. There are lots of tutorial on internet how to create persistence backdoor on android. You can try them. Thanks.

                                                Delete Comment
                                              • AnonymousMarch 3, 2021 at 2:43 AM

                                                I have installed both L3MON and HaxRat - however the one issue I am getting is the IP address that I need to provide - I have a dynamic IP and not a static one - what is the workaround for the same ?

                                                Delete Comment
                                                • Kali Linux photo
                                                  Kali LinuxMarch 4, 2021 at 5:47 PM

                                                  We can suggest you no-ip services. This will make your dynamic IP static. Else you can ask your Internet service provider for a static IP (they might charge extra for it). No-Ip is a free service you can try it.

                                                  Delete Comment
                                                • Unknown photo
                                                  UnknownMarch 29, 2021 at 9:49 AM

                                                  What is user name and oassword in control pannel plz

                                                  Delete Comment
                                                • Unknown photo
                                                  UnknownApril 24, 2021 at 10:27 PM

                                                  Sir aap me aona video private q kiya hai ?

                                                  Delete Comment
                                                  • Kali Linux photo
                                                    Kali LinuxApril 25, 2021 at 7:13 PM

                                                    That video was uploaded by the developer we can't say much about it.

                                                    Delete Comment
                                                  • Unknown photo
                                                    UnknownApril 24, 2021 at 10:28 PM

                                                    Please answer me

                                                    Delete Comment
                                                    • Unknown photo
                                                      UnknownApril 25, 2021 at 2:07 AM

                                                      I fixed everything but can't see Devices even after that.

                                                      Delete Comment
                                                      • Kali Linux photo
                                                        Kali LinuxApril 25, 2021 at 7:14 PM

                                                        Can you send screenshot here (screenshot link) or on our telegram group.

                                                        Delete Comment
                                                        • Unknown photo
                                                          UnknownApril 29, 2021 at 4:10 PM

                                                          In WAN network Port forwarding Mandatory? if Mandatory then plz tell me when i used internet without Router then how port forward? help me plz and also tell me for Haxrat which port have to forwarding?

                                                          Delete Comment
                                                          • Kali Linux photo
                                                            Kali LinuxApril 30, 2021 at 11:14 AM

                                                            Yes! In the case of WAN port forwarding is mandatory. Otherwise other devices can't reach to our network from the internet. We already have an article on this. Check SSH port forwarding without router article.

                                                            Delete Comment
                                                            • Unknown photo
                                                              UnknownMay 2, 2021 at 1:59 AM

                                                              sir i used ngrok for port forwarding. but still now not showing victim devices(my another devices that which other internet connection). haxrat page will open, apk creates easily then where can the problem be?

                                                              Delete Comment
                                                            • AnonymousJune 6, 2021 at 6:46 PM

                                                              Sir i am getting " apkmod not found " problem after entering my ip in apk builder.

                                                              Any solution to that . I have installed apkmod from github but that not worked same problem :(

                                                              Delete Comment
                                                              • Kali Linux photo
                                                                Kali LinuxJune 7, 2021 at 9:31 AM

                                                                Haxrat giving lots of errors.

                                                                The developer of Haxrat is in our Telegram group. In some recent talks he hints to discontinue the haxrat project because of lots of errors.

                                                                Delete Comment
                                                              • AnonymousOctober 21, 2021 at 1:46 PM

                                                                In my case, Everything was fine but after installing the apk server shows device is offline.

                                                                Delete Comment
                                                                • Kali Linux photo
                                                                  Kali LinuxOctober 22, 2021 at 12:20 PM

                                                                  The developer of Haxrat (Lokesh) is in our Telegram Family. You can chat with him. In some recent talks he hints to discontinue the haxrat project because of lots of errors, and he is not getting enough time to fix them.

                                                                  Delete Comment
                                                                • Erwin Rommel photo
                                                                  Erwin RommelOctober 22, 2021 at 12:29 PM

                                                                  Guys do we have a channel of forum where we discuss tools only - I mean RATs Malwares etc ? The current Telegram channel is more dedicated to installing Termux and/or Kali only (a majortiy of it)

                                                                  Delete Comment
                                                                  • Kali Linux photo
                                                                    Kali LinuxOctober 22, 2021 at 7:53 PM

                                                                    RAT's and Malwares is seems to be not so ethical. Many of group members will take advantage of it for illegal things. We more focus on ethical things and security. In our current group there are lot of newbies. They are just learning things. They will learn the things we just need to help them. We will be a strong community/family. If we allow such type of things we will become a black hat team. That's what we don't want. We want to be a community of security experts not hackers. Hope you will understand.

                                                                    Delete Comment
                                                                  • AnonymousJanuary 14, 2023 at 7:54 PM

                                                                    Hello Developer,
                                                                    Please help me to know which port to forward in our router (.i.e.:- 22533 or 22222 and after that using which ip and port should we build the apk(.i.e public ip and 22533 or 22222) to build apk? so that it will be accessible over the internet

                                                                    Delete Comment
                                                                    • AnonymousApril 4, 2023 at 8:19 AM

                                                                      it does not work with real android devices does any one have any solutions

                                                                      Delete Comment
                                                                      • AnonymousApril 4, 2023 at 8:25 AM

                                                                        yes i really does not works in real android device with android8.1

                                                                        Delete Comment
                                                                      • AnonymousJuly 25, 2023 at 11:27 PM

                                                                        what is ip in building apk file?

                                                                        Delete Comment
                                                                        • RatBasticheAugust 3, 2024 at 5:21 PM

                                                                          when I get to the step "node index.js" (actually I have to run it as sudo node index.js) I get the following output and then I am stuck ....

                                                                          /////// Begin copy / paste \\\\\\\

                                                                          Server Started!
                                                                          http://localhost:22533
                                                                          /haxRat/server/index.js:30
                                                                          let client_io = IO.listen(CONST.control_port);
                                                                          ^

                                                                          TypeError: IO.listen is not a function
                                                                          at Object. (/haxRat/server/index.js:30:20)
                                                                          at Module._compile (node:internal/modules/cjs/loader:1358:14)
                                                                          at Module._extensions..js (node:internal/modules/cjs/loader:1416:10)
                                                                          at Module.load (node:internal/modules/cjs/loader:1208:32)
                                                                          at Module._load (node:internal/modules/cjs/loader:1024:12)
                                                                          at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:174:12)
                                                                          at node:internal/main/run_main_module:28:49

                                                                          Node.js v20.16.0
                                                                          craig@BB4Eva:/haxRat/server$

                                                                          ///// End copy / paste \\\\\\\

                                                                          Oh the horror! Any chance this makes good sense to anyone who wouldn't mind taking a moment to offer some constructive advice? This has me stuck like Chuck and I'm not sure what I need to do to get this exercise back on track again.

                                                                          Thank you in advance!

                                                                          Delete Comment
                                                                          • RatBasticheAugust 3, 2024 at 5:30 PM

                                                                            PS . ... No main page ever materializes either, in case that was in question... I have to assume the reason is because the command "sudo node index.js" failed catastrophically and did not complete ... therefore, a number of key modifications to necessary files and / or folders did not occur ... but that's just a guess, and I looked .... but as it turns out, I am fresh out of clues!

                                                                            So again, thanks in advance.

                                                                            Delete Comment
                                                                          google-playkhamsatmostaqltradent