HaxRat is a remote administration tool for Android. This utility includes additional control options and is compatible with Android and Linux. This tool’s major feature is a user interface.
Rear Camera Recorder.
Front Camera Recorder.
View Installed Apps.
View Stub Permissions.
Live Clipboard Logging.
Live Notification Logging.
View WiFi Networks (logs previously seen).
File Explorer & Downloader.
Built-In APK Builder.
Install and use the HaxRat
We can easily install this Hax Rat tool, this tool can be installed and used in both Linux and Termux. before that, we need to install some required packages so following the below commands
First, we need to install the JRE Package in our kali-Linux system so execute the below command
sudo apt-get install nvidia-openjdk-8-jre
Then install the node-Js package so type the following command in your terminal
sudo apt-get install -y nodejs
After completing the Node-Js, and JRE installation package installs the pm2 process manager to execute the following command
sudo npm install pm2 -g
Step 1: completing the installation of the pre-request Install the HaxRat utility so run the following command.
git clone https://github.com/Hax4us/haxRat
Step 2: Then we navigate to the server directory under haxRat by using the Below command.
Step 3: Now install the dependencies using the npm command.
Step 4: Now change the password of haxrat tool so edit the “maindb.json“. The password should be “MD5 Hash code“
If you don’t know the password changing follow the below steps
First, click the below button and type your password to the text box and click the generate button
After clicking the generated button your password hash code will be ready to copy that hash code
Step 5: Now paste the MD5 Hash code to the password location inside the quotation.
Step 6: Now run the below command inside the server directory.
Step 7: Now copy that generated URL and paste it to the browser to access the HaxRat tool
Step8: Now log in to the haxrat tool after that click the Apk builder option to generate the payload. Then send a payload to the victim, Once the victim installs your payload to their android phone you can access all data from your device
I hope you find this post very useful and if you have any query regarding this post you can ask me through command section given below.