.
This Tutorial is "STRICTLY" for "EDUCATIONAL" purpose only.
Don't Misuse It.
A
remote access tool (a
RAT) is a piece of software
that allows a remote "operator" to control a system as if he has
physical access to that system. While desktop sharing and remote
administration
have many legal uses, "RAT" software is usually associated with
criminal or malicious activity. Malicious RAT software is typically
installed without the victims knowledge, often as payload of a Trojan
horse, and will try to hide its operation from the victim and from
security software.
The operator controls the RAT through a network connection. Such tools provide an operator the following capabilities:
- Screen/camera capture or image control
- File management (download/upload/execute/etc.)
- Shell control (from command prompt)
- Computer control (power off/on/log off if remote feature is supported)
- Registry management (query/add/delete/modify)
- Other software product-specific functions
A diagram is shown below which illustrates the remote administrator
as the "client" connected to multiple "server" computers that are
performing various functions:
Func Func
\ / Func Func
[SERVER] \ /
| [SERVER]
| /
| /
| / Func Func
| / \ /
[CLIENT]------[SERVER]