List

17 Open-source Free Android RAT (Remote Access Tool) Apps

Hazem Abbas

Oct 17, 2023 — 16 min read

Photo by Hardik Sharma / Unsplash

An Android RAT (Remote Access Tool) is a type of software that allows users to remotely control and manage Android devices. These tools provide functionalities such as executing commands, accessing files, capturing screenshots, and more.

Android RAT tools are important for various purposes. They can be used for legitimate purposes, such as remotely managing and troubleshooting Android devices within an organization or for personal use. They can also be used by security professionals and researchers to assess the security of Android devices and identify vulnerabilities.

However, it is crucial to note that the use of Android RAT tools should always comply with legal and ethical considerations. Unauthorized and malicious use of these tools can invade privacy, compromise security, and violate laws.

It is important to ensure that the use of such tools is done with proper authorization and consent, and in compliance with applicable laws and ethical guidelines.

In the following list, you will find the best open-source Android RAT tools, and solutions.

1- Ghost

Android Ghost is is a remote administration tool (RAT) for Android devices. It allows users to remotely control and manage Android devices, including executing commands, accessing files, and capturing screenshots.

Please note that the use of such tools should comply with legal and ethical considerations.

2- AndroRAT

AndroRAT is another remote administration tool (RAT) for Android devices. Similar to Ghost, it provides remote control and management capabilities for Android devices.

However, it is important to remember that the use of such tools should always comply with legal and ethical considerations.

3- DogeRat

DogeRat is a remote administration tool (RAT) for Android devices. It is designed to provide remote control and management capabilities for Android devices, similar to Ghost and AndroRAT.

However, it is crucial to ensure that the use of such tools is in compliance with legal and ethical considerations.

The free version features include:

Real time
🌐 custom web view
🔔 notification reader
🔔 notification sender (send custom notification that apper on target device with custom click link)
🗨️ show toast message on target device (Toasts are messages that appear in a box at the bottom of the device)
📡 receive information about SIMCard provider
📳 vibrate target device
🛰️ receive device location
✉️ receive all target message
✉️ send sms with target device to any number
✉️ send sms with target device to all of his/her contacts
👤 recive all target contacts
💻 receive list of all installedd apps in target device
📁 receive any file or folder from target device
📁 delete any file or folder from target device
📷 capture main and front camera
🎙 capture microphone (with custom duration)
📋 receive last clipboard text
✅️ auto start after device boot
🔐 Keylogger {Availbe in apk v1 and v2}
✨ Beautiful telegram bot interface
-🤖 Undetectable by antivirus

4- AndroidSpyware

AndroidSpyware is a repository on GitHub that provides information and resources related to Android spyware. It focuses on the detection and analysis of Android spyware applications.

It is important to note that the use of spyware, including Android spyware, is generally considered unethical and may be illegal in many jurisdictions.

It is crucial to respect privacy and adhere to legal and ethical considerations when using any software or tools.

5- AIRAVAR

AIRAVAR is a multifunctional Android RAT with GUI based Web Panel without port forwarding.

Features

Read all the files of Internal Storage
Download Any Media to your Device from Victims Device
Get all the system information of Victim Device
Retrieve the List of Installed Applications
Retrieve SMS
Retrieve Call Logs
Retrieve Contacts
Send SMS
Gets all the Notifications
Keylogger
Admin Permission
Show Phishing Pages to steal credentials through notification.
- Steal credentials through pre-built phishing pages
- Open any suspicious website through notification to steal credentials.
Record Audio through Mic
Play music in Victim's device
Vibrate Device
Text To Speech
Turn On/ Off Torch Light
Change Wallpaper
Run shell Commands
Get Clipboard text (Only When app's Activity is visible)
Launch Any URL (Only When app's Activity is visible)
Pre Binded with Instagram Webview Phishing
Runs In Background
- Auto Starts on restarting the device
- Auto Starts when any notification arrives
No port forwarding needed

6- Teardorid

Teardorid is an easy-to-use Android botnet to work without port forwarding, VPS and Android Studio. It is tested in Windows 11, Windows 10, Manjaro, Kali Linux, Ubuntu, and macOS Ventura.

Features

Retrieve Contact
Retrieve SMS
Retrieve running Services
Retrieve Device Location (😟 Only work when the app is open on newer devices)
Retrieve Call Logs
Run Shell Command (use findphno command in run shell command to get device phone number and use findx:pdf to find all the PDF files on the device )
Change Wallpaper
Send SMS
Make Call
Get Installed Apps
Download File
Read Notification
Auto-Start
Add webview in homepage
Ignore Battery Optimisation
Change icon
Get device admin permission

7- AhMyth

AhMyth is a cross-Platform Android Remote Administration Tool.

8- Android RAT

Android RAT built in Android APP for Android User.

Features

Read , Delete Internal Storage Files
Download Any Media to your Device from Victims Device
Get GPS location
Get Network Provider Location
Get all the system information of Victim Device
Shows all the installed apps in Victims Device
Open Any Website in Victims Device
Make any folder in Victims Device
Show any notification in Victims Device
Delete any File or Folder From Victims Internal Storage
Dump SMS
Play music in Victims device
Change Wallpaper
Vibrate Device
Turn On/Off Flash Light
Text To Speach Feature
Runs In Background Even App is Closed
Support to Android v5 +
No Port Forwarding Needed
Fully Undetectable
Wipe SD-Card
Shows Update Page , if you want.
Pre Binded Instagram Webview Phishing

9- AdbNet

AdbNet is a tool that allows you to search for vulnerable android devices across the world and exploit them.

Features

Post-Exploitation modules to control and tinker with the device you are connected to.
Scanners to search for vulnerable android devices across the world to exploit.
Options for managing how many devices you have connected.
Options for checking whether the devices you are connected to are online or offline.
IP-Lookup for retrieving information on a certain IP.
Options to dump the IP Addresses of the vulnerable android devices. [This makes your life easier so you don't have to find it yourself]

10- ShotDroid

ShotDroid is a pentesting tool for android. There are 3 tools that have their respective functions, Get files from Android directory, internal and external storage, Android Keylogger + Reverse Shell and Take a webcam shot of the face from the front camera of the phone and PC.

Features:

Android Files : Get files from Android directory, internal and external storage (Images, Videos, Whatsapp, ..)
Android Keylogger : Android Keylogging Keyboard + Reverse Shell.
Take Face Webcam : Take face shot from the target phone's front camera and PC webcam.
Hide apps in android files.
Custom android directory.
For Android Keylogger -> you can see it here: Simple-keyboard or LokiBoard.
Automatic html template in take face webcam.
Custom HTML or custom your HTML folder in take face webcam tool.

11- BDROID

This Android botnet work without port forwarding, VPS and Android Studio. This is a fully fresh & new undetectable Android Botnet.

This botnet work on Android 5 to 10 Any Devices.

Features:

Show Contact List
Show SMS List
Show running Services
Show Device Location
Show Call Logs
Run Shell Command
Change Wallpaper
Send SMS
Make Call
Get Installed Apps
Download File
Read Notification
Auto-Start

12- TecSpy

TecSpy is an open-source free cloud-based Android Monitoring Tool, powered by Node.js.

Features

GPS Logging
Microphone Recording
View Contacts
SMS Logs
Call Logs
View Installed Apps
View Stub Permissions
Live Clipboard Logging
Live Notification Logging (WhatsApp, Facebook, Instagram, Gmail, and more...)
View WiFi Networks (logs previously seen)
File Explorer & Downloader
Command Queuing
Device Admin

13- pounce-keys

pounce-keys, is a new android keylogger made in 2023 to support nougat to android 13, full launcher stealth with a custom listener to filter out logs + support to send the logs to your Discord server and Gmail.

Features

Reads hidden notifications in locked state (grabs google code before owner sees it)
Grabs almost all text on the screen the user is looking at.
Works over WAN without open ports on phones end
Filtered tabs for different apps to reduce logs for easy reading
300+ lines of error free custom code
Gets pin code
Auto scrolling
Works in windows and Linux as a .exe, .java, and .jar
Asks user for IP and port with autofill (double check correct IP and port)
Cute cat icon
Logs date and time AND SAVES THEM

14- Moukhar

Moukhar is an open-source codebase foundation for an Android Remote Administration Tool with C2 Server.

Features

Persistent reconnection with C2 regardless if the client application is closed or placed in background or the device is restarted or current connection is interrupted
Hidden App Icon
Send/ Read SMS
Write/ Read Contacts
Read Call Log
Dial USSD code without opening dialer (API 26+)
Take Picture (Front/Back camera)
Take Screenshot
Make Phone Call
List Installed Apps
Vibrate Phone
Get Device Location
Change Wallpaper
Clipboard Monitoring

15- ShotDroid V2

Another version of ShotDroid that allows better access and full control of Android devices.

16- Rafel

Rafel is Remote Access Tool Used to Control Victims Using WebPanel With More Advanced Features.

Features

Admin Permission
Add App To Whitelist (Ignore Battery Optimisation)
Looks Like Legit Mod App
Runs In Background Even App is Closed(May not work on some Devices)
Accessibility Feature(Cause Erros in some device --> ignore it)
Support Android v5 - v12
No Port Forwarding Needed
Acquire Wakelock
Fully Undetectable
Bypass PlayProtect
Wipe SD-Card
Lock Device Screen
Change Wallpaper
Ransomware
Vibrate Device
Delete Calls Logs
Notify Victims Via Discord
steal notifications(send through discord)
Added AutoStart For (poco,xiaomi,oppo,vivo,LetV,Honor)

17- ADB WEBKIT

This is an awesome ADB tool for hackers that allows you to access Android devices using web browsers.

You can access the shell, install APK apps remotely, take screenshots, record Android screen, manage all Android files remotely, and control the network settings.