HaxRat -- Take Total Control on Android Remotely

HaxRat is a cloud based remote android management suite in simple word it is a Android RAT, powered by NodeJS. It works in Linux and Termux (Android).

haxrat github tool made by hax4us control android remotely
Previously we have featured an article on L3MON, HaxRat is based on L3MON but much more powerful then L3MON. It have some extra features like screenshot, screen recording, front and rear camera recording. This is developed by Hax4us (Lokesh Pandey). The Key features of HaxRat are following:

Key Features of HaxRat

  • Screenshot Capture.
  • Screen Recorder.
  • Rear Camera Recorder.
  • Front Camera Recorder.
  • Lock Device.
  • GPS Logging.
  • Microphone Recording.
  • View Contacts.
  • SMS Logs.
  • Send SMS.
  • Call Logs.
  • View Installed Apps.
  • View Stub Permissions.
  • Live Clipboard Logging.
  • Live Notification Logging.
  • View WiFi Networks (logs previously seen).
  • File Explorer & Downloader.
  • Command Queuing.
  • Built In APK Builder.
We can easily install this suite on Linux , we also can install it on our Android phone by using Termux.

Installing HaxRat on Kali Linux

The installation process is the same as we did in our L3MON tutorial. We have detailed discussion on our that post So we are not going to explain the commands.

First we install JRE in Kali by using following command:
sudo apt-get install openjdk-8-jre
Then we download NodeJs in our system by applying following command:
curl -sL https://deb.nodesource.com/setup_13.x | sudo bash -
Now we install NodeJs by preceding following command:
sudo apt-get install -y nodejs
Now we need pm2 process manager to install this we use following command:
sudo npm install pm2 -g
Now we clone haxRat from it's GitHub repository by using following command:
git clone https://github.com/Hax4us/haxRat
Then we navigate to server directory under haxRat by using cd command:
cd /haxRat/server
Then we need to install dependencies by using following command:
npm install
Then we start the server by using following command:
node index.js
Now we can see our server in our browser http://localhost:22533 there will be a login page as following screenshot:

haxrat login panel

Now we stop this server by using CTRL+C command. Now what to do ? Login ? But where are the credentials?  We have talked before how to create a custom credential on our older L3MON tutorial. Otherwise check the haxRat GitHub repository for default credentials.

After login we can see the main page as shown in the following screenshot:

haxrat dashboard termux

Now we go to the APK Builder page and give our local IP address and click on build.

If got  error like "Wrong java Version installed....." this when building APK then try following command:
sudo update-alternatives --config java
Then Then we type 2 and enter.

Then we stop our running haxRat server by CTRL+C and start it again this problem will be solved.

Now we can build Spy APK and send it to victim, whenever victim install it and grant the permission. Or if we got victim's phone in hand then we can implement this.

We got the victim in our haxRat dashboard like following screenshot:


haxrat dashboard

Now in the manage section we can manage the Android device totally. Magics will start from here.

Installed Android Apps
File Manager
Recording from front Camera

Installing HaxRat on Android (using Termux)

This is easy to installed in Termux. We try following commands one after another to install and configure haxRat.
apt install nodejs
git clone https://github.com/hax4us/haxRat.git
cd haxRat/server
npm install
mkdir ~/haxrat
haxrat
node index.js
In our browser we navigate to http://<Local IP>:22533 and we will be the login screen of haxRat.

This video by the developer is described how to install haxRat in Termux / Android:


This is how we can start the haxrat server and take control of any android device on our local network. We also can run this on wide network or internet by using PortMap service.

Disclaimer

Provides no warranty with this software and will not be responsible for any direct or indirect damage caused due to the usage of this tool or this tutorial.
HaxRat is built and our article is documented for both Educational and Internal use ONLY
.

Getting any problem during installing or configuring HaxRat ? Feel free to contact us by commenting with error details on below comment section or on the YouTube video this video is uploaded by the developer himself. For more tutorials like this subscribe our newsletter to get updated. Also we post updates on our Twitter and Medium make sure to follow us there.
author-img
Kali Linux

Comments

50 comments
Post a Comment
  • anonymus photo
    anonymusJuly 16, 2020 at 1:16 AM

    FOR DEFAULT PASSWORD WE HAVE TO DOWNLOAD FILE?

    Delete Comment
    • Kali Linux photo
      Kali LinuxJuly 16, 2020 at 2:00 AM

      You may, otherwise you can try another method and generate your custom username and password . Go to our L3MON tutorial. This tool is based on L3MON so that will work finely.

      Delete Comment
      • Unknown photo
        UnknownJanuary 7, 2021 at 5:55 PM

        Can we use 22222 in haxrat aswell??

        Delete Comment
        • Kali Linux photo
          Kali LinuxJanuary 8, 2021 at 8:57 AM

          You can use any port number for it.

          Delete Comment
          • Unknown photo
            UnknownFebruary 27, 2021 at 4:50 PM

            this specific command is not working in kali linux virtual box

            sudo npm install pm2 -g

            it says sudo: npm: comand not found please help me asap because i haven't progressed after getting stuck at this command

            Delete Comment
            • Kali Linux photo
              Kali LinuxFebruary 28, 2021 at 12:13 PM

              This problem comes because you don't have npm. You need to install it by using following command:

              sudo apt-get install npm

              Thanks.

              Delete Comment
              • Anime photo
                AnimeMarch 6, 2021 at 9:07 AM

                which kali linux ios build are you using , my laptop is 64bit , i want to know which is the best bild where i can use these penetration tests ,there are many builds where L3MON and HAXRAT dose'nt work.

                Delete Comment
              • blogger photo
                bloggerAugust 1, 2020 at 7:25 PM

                nice tool admin,can you please post how to make pdf or a picture backdoor for android

                Delete Comment
              • Unknown photo
                UnknownAugust 12, 2020 at 12:26 PM

                please need help
                when installling "sudo npm install pm2 -g"
                i receive this messagge:"sudo: npm : commande introuvable"

                Delete Comment
                • Kali Linux photo
                  Kali LinuxAugust 12, 2020 at 2:07 PM

                  The npm file should be in /usr/local/bin/npm. If it's not there, install node.js again.

                  Delete Comment
                  • Unknown photo
                    UnknownAugust 15, 2020 at 11:06 PM

                    I TRIED TO REINSTALL NODE.JS.BUT THE PROBLEM IS THE SAME AND I GOT THE SAME MESSAGE(npm command not found)
                    my system is windows 7 32bit thanks

                    Delete Comment
                    • Kali Linux photo
                      Kali LinuxAugust 16, 2020 at 5:07 AM

                      We suggest you to to to the official page of nmp and follow the instructions.

                      Delete Comment
                    • Unknown photo
                      UnknownAugust 18, 2020 at 9:06 PM

                      unable to open java -jar /root/haxRat/server/app/factory/apktoll.jar...when i was trying to building payload

                      Delete Comment
                      • Kali Linux photo
                        Kali LinuxAugust 19, 2020 at 10:45 PM

                        To solve this we need full information that how you have installed it. We suggest a re-install for more details try the video. We think that apktool.jar file is missing from it's path or you might forgot to use sudo.

                        Delete Comment
                      • Yudip upreti photo
                        Yudip upretiAugust 28, 2020 at 6:01 PM

                        Please help me to fix bash: cd: /haxRat/server: No such file or directory

                        Delete Comment
                        • Kali Linux photo
                          Kali LinuxAugust 28, 2020 at 6:29 PM

                          Did you cloned haxRat from github. We think you need to do it again and follow our instructions carefully and you need to be in the right directory. Is says that you don't have these directory in our system, so please check it by ls command.

                          Delete Comment
                        • AnonymousSeptember 20, 2020 at 3:55 PM

                          can I use ngrok for port forwarding?

                          Delete Comment
                          • Kali Linux photo
                            Kali LinuxSeptember 20, 2020 at 5:45 PM

                            Yes, we can but the author of this tool suggest to use portmap services.

                            Delete Comment
                          • AnonymousSeptember 28, 2020 at 1:16 PM

                            bro,
                            please make give detail information about QRLJACKING.
                            bro your content is awesome...

                            Delete Comment
                            • Kali Linux photo
                              Kali LinuxSeptember 28, 2020 at 5:25 PM

                              Okey we will do a qrljacking tutorial but after some time, because we are working with some awesome contents. Thanks for your suggestion.

                              Delete Comment
                            • Unknown photo
                              UnknownOctober 28, 2020 at 8:53 PM

                              the target phone will not connect. neither will mine. ive downloaded the apk and everything is there but i cant seem to get anything further than the download..please advise

                              Delete Comment
                              • Kali Linux photo
                                Kali LinuxOctober 29, 2020 at 7:59 AM

                                Tell us something about your connections. Which IP you have provided in APK building?

                                Delete Comment
                              • AnonymousNovember 6, 2020 at 5:32 PM

                                https://pastebin.com/PG8nuYXv

                                Defualt password is haxratserver

                                Delete Comment
                              • AnonymousNovember 30, 2020 at 9:28 AM

                                Do you have complete tutorial setting portmap to use haxRAT over internet?
                                Is the localhost:xxxx port is the port I should fill on the app builder?
                                I've tried many times, but has no luck
                                Thankyou

                                Delete Comment
                                • Kali Linux photo
                                  Kali LinuxNovember 30, 2020 at 1:56 PM

                                  We did not tried it. But the developer of this tool told that he connects it with portmap and it works well.

                                  Delete Comment
                                • AnonymousNovember 30, 2020 at 9:29 AM

                                  Is it possible the app we built using haxRAT accesible by others hackers?

                                  Delete Comment
                                • AnonymousDecember 9, 2020 at 4:35 PM

                                  this is the error i get when i configure java
                                  There is only one alternative in link group java (providing /usr/bin/java): /usr/lib/jvm/java-11-openjdk-amd64/bin/java
                                  Nothing to configure.

                                  Delete Comment
                                  • Kali Linux photo
                                    Kali LinuxDecember 9, 2020 at 5:53 PM

                                    It's looks like you doesn't have installed Java in your system. Try following command to install it and follow the tutorial then:

                                    sudo apt-get install openjdk-8-jdk

                                    Delete Comment
                                  • irfan photo
                                    irfanJanuary 15, 2021 at 2:11 AM

                                    Hi I was tried the browser it's say bad login the all is ok admin and password I write and see bad login i use chrome and android mia3

                                    Delete Comment
                                  • AnonymousFebruary 4, 2021 at 1:07 PM

                                    I installed the app in victims phone but after some time connection got lost and never got back

                                    Delete Comment
                                    • Kali Linux photo
                                      Kali LinuxFebruary 4, 2021 at 5:26 PM

                                      This happens with everyone. You need to make a persistence backdoor inside the phone. There are lots of tutorial on internet how to create persistence backdoor on android. You can try them. Thanks.

                                      Delete Comment
                                    • AnonymousMarch 3, 2021 at 2:43 AM

                                      I have installed both L3MON and HaxRat - however the one issue I am getting is the IP address that I need to provide - I have a dynamic IP and not a static one - what is the workaround for the same ?

                                      Delete Comment
                                      • Kali Linux photo
                                        Kali LinuxMarch 4, 2021 at 5:47 PM

                                        We can suggest you no-ip services. This will make your dynamic IP static. Else you can ask your Internet service provider for a static IP (they might charge extra for it). No-Ip is a free service you can try it.

                                        Delete Comment
                                      • Unknown photo
                                        UnknownMarch 29, 2021 at 9:49 AM

                                        What is user name and oassword in control pannel plz

                                        Delete Comment
                                      • Unknown photo
                                        UnknownApril 24, 2021 at 10:27 PM

                                        Sir aap me aona video private q kiya hai ?

                                        Delete Comment
                                      • Unknown photo
                                        UnknownApril 24, 2021 at 10:28 PM

                                        Please answer me

                                        Delete Comment
                                        • Unknown photo
                                          UnknownApril 25, 2021 at 2:07 AM

                                          I fixed everything but can't see Devices even after that.

                                          Delete Comment
                                          • Kali Linux photo
                                            Kali LinuxApril 25, 2021 at 7:14 PM

                                            Can you send screenshot here (screenshot link) or on our telegram group.

                                            Delete Comment
                                            • Unknown photo
                                              UnknownApril 29, 2021 at 4:10 PM

                                              In WAN network Port forwarding Mandatory? if Mandatory then plz tell me when i used internet without Router then how port forward? help me plz and also tell me for Haxrat which port have to forwarding?

                                              Delete Comment
                                              • Kali Linux photo
                                                Kali LinuxApril 30, 2021 at 11:14 AM

                                                Yes! In the case of WAN port forwarding is mandatory. Otherwise other devices can't reach to our network from the internet. We already have an article on this. Check SSH port forwarding without router article.

                                                Delete Comment
                                                • Unknown photo
                                                  UnknownMay 2, 2021 at 1:59 AM

                                                  sir i used ngrok for port forwarding. but still now not showing victim devices(my another devices that which other internet connection). haxrat page will open, apk creates easily then where can the problem be?

                                                  Delete Comment
                                                • AnonymousJune 6, 2021 at 6:46 PM

                                                  Sir i am getting " apkmod not found " problem after entering my ip in apk builder.

                                                  Any solution to that . I have installed apkmod from github but that not worked same problem :(

                                                  Delete Comment
                                                  • Kali Linux photo
                                                    Kali LinuxJune 7, 2021 at 9:31 AM

                                                    Haxrat giving lots of errors.

                                                    The developer of Haxrat is in our Telegram group. In some recent talks he hints to discontinue the haxrat project because of lots of errors.

                                                    Delete Comment
                                                  google-playkhamsatmostaqltradent