JSRAT | Javascript Backdoor to Control Victim Machine 🚪

[TheJoker]

https://github.com/aspiggy/JSRAT

JSRAT is a python Script that can be used to get a remote shell of victim pc.

Installation & Setup :-

• Download the JSRAT tool from github

• Download and give appropriate permission to execute the script.Above figure shows the complete installation

Starting the web server:

• Run and execute the command: python JSRAT.py -i -p 8080

• JSRAT provides the list of URLs.Copy the Client command here it is http://192.168.172.143:8080/wtf

VICTIM MACHINE:-

• Open this Client command URL with Victim browser

• To gain the shell payload generated by URL should be opened with CMD.

• Once the command is executed a shell will be obtained.

BACK TO ATTACKERS MACHINE:-

• Here we go !!! We have connected to Victim machine

• Let us try some windows command: Ipconfig

• Above Figure shows executing the command calc opens up the windows calculator. JSRat can also provide upload, Read and Download files.

[E10n]

Thanks @TheJoker.

[Darklooter]

Is this a persistent backdoor ?

[reetkr]

can it be done for unix systems?

[Himanshu_Chandola]

Thanks for Sharing !

[Mountakha_NDIAYE]

@TheJoker

http://192.168.172.143:8080/wtf

I got this error where i try to reproduce the tuto.