This repo contains android trojan (and Dataset) as far as I know (free or paid app) with feature and permission list for my documentation.
Looking for port forwarding without buying VPN or Router setting?? Use Ngrok
#Vx-Underground https://www.vx-underground.org/archive.html#builders
Please don't download the project if you won't be infected by Trojan, make sure to recheck before downloading or installing from an unknown source (Trojan in a Trojan??).
-
DroidJack [GUI]
- Camera, Microphone, Location
- Storage
- SMS, CALL, Contact
- Whatsapp Reader
- Browser History
- App Manager
-
AndroRAT https://github.com/DesignativeDave/androrat https://github.com/karma9874/AndroRAT https://github.com/The404Hacking/AndroRAT [GUI]
- Contact, Call logs, Call, SMS
- Location, Camera, Microphone
- Streaming video (for activity based client only)
- Do a toast, message
- Give call
- Open an URL in the default browser
- Do vibrate the phone
-
SpyNote [GUI]
- Bind app, Storage, Location
- SMS, Call, Call logs, Contact, Camera
- Listen live conversation through mic, record mic sound live.
- Check browser history.
- Check installed apps.
- Get phone’s information (IMEI, WIFI MAC, PHONE CARRIER).
- Fun Panel (Show messages, shake the phone etc)
-
AhMyth [GUI] https://github.com/AhMyth/AhMyth-Android-RAT
- Camera, Mircophone,
- Storage, Location
- Message, Call, Call logs, Contact
-
TheFatRAT https://github.com/Screetsec/TheFatRat
- execute command
- process lost
- camera snap, stream, list, microphone
-
BetterAndroRAT https://github.com/mwsrc/BetterAndroRAT
- Add and remove app
- Camera, Microphone, Storage
- Call & SMS
- Remote Device Controller
-
UnknownRAT [GUI]
- Storage access
- Android Tools such, take photo, screenshot etc
- Record audio
-
android_trojan / Android Trojan https://github.com/androidtrojan1/android_trojan
- shell command, browser history, microphone, location, storage
- add and remove app
- call log, contact,sms dump,
-
OmniRAT [GUI]
- Fully Remote Access
- File Manager, add and remove apps
- App Widgets
- Full System Information
- Call & SMS
-
Android Voyage
- Remote Android Screen
- Screenshot, keylog, traffic monitor
- Make as system application
- Lock unlock, hide unhide app
- Remove android password
- Message Access
- Bricks the device, Anti Antivirus
- Self Destructive Mode
- Password Grabbers
-
NetWire
- camera
- audio
- keylogger
- storage
- download upload
- location
- etc
-
rdroid https://github.com/m301/rdroid
- Contact
- System
- App
- Storage
- Call
- Message
- Shell
-
LokiDroid [GUI]
- SMS, Call, Call logs, Contact, Toast, Browser
- Storage, Location, Microphone, Camera
- Phone's Hardware and Software details
- Sim details
- Internet details and IP
- offline commands for bots
- Multiple commands for multiple bots
- http RAT ( not required port forwarding)
-
KevDroid
- Installed applications
- Phone number
- Phone Unique ID
- Location (the application tries to switch on the GPS, 10s capture location)
- Contact, SMS, Call logs, Call, Mails
- Storage, Microphone
-
columbus-trojan https://github.com/project-columbus/trojan (cute trojan)
- Image (front-facing camera)
- 10-second sound clip (microphone)
- Location (mobile triangulation)
-
GhostCtrl
- Admin
- Voice record
- Message
- Location
-
Pupy https://github.com/n1nj4sec/pupy
- Text to speech for Android to say stuff out loud
- webcam snapshots (front cam & back cam)
- GPS tracker !
-
TeleRAT and IIRAT (Telegram BOT)
- Clipboard
- App list
- SMS, Contact
- Storage, Microphone, Camera
- Control Admin Screen, Vibrate
-
Hidden Cobra
- Proxy
- Contact
- SMS
- Payload
-
Dendroid https://github.com/nyx0/Dendroid
- SMS, Call, Call logs,
- Opening web pages
- Uploading images and video
- Opening an application
- Performing denial-of-service attacks
- Changing the command and control server
-
Casperspy https://github.com/dhanumurti [GUI]
- Similar with dendroid
- Actually Botnet by dendroid
- SMS
- Camera, Storage, Microphone
- Browser open page
-
Joanap
- Mic
- botnet
- steal log
-
SHConnect
- Camera
- Location
- Storage
-
HighRise
- Incoming outgoing SMS
-
LaRAT https://github.com/c4wrd/LaRat
- Get messages
- Screenshot Functionality
- Camera Access
- Add Google form for passwords
-
Triout Framework
- Record phonecall, save it, send it to C&C
- SMS Logs
- Call Logs
- Steal Images or Video, Camera Access
- Hide
-
Cerberusapp
- Storage
- Location
- Camera
- Admin
- notdeleteable
- more
-
Pegasus (Sample https://github.com/9aylas/Pegasus-samples) (decompiled https://github.com/jonathandata1/pegasus_spyware)
- Storage, Microhpone, Location
- Screenshot
- Calender
- Instant Messaging
- Contact & Call & SMS & Mail
- Browser History
- Device Setting
-
Adobot https://github.com/adonespitogo/AdoBot
- Realtime command execution
- Schedule commands
- Hidden app icon (stealth mode)
- SMS, Call, Call logs, Contact
- etc
-
Adroid Spy App https://github.com/abhinavsuthar/Android_Spy_App
- Contact, Call logs, SMS
- Logs
- Location, Storage
- Etc
-
SpyApp Client https://github.com/ghazikr/SpyAppClient [GUI]
- Notification Listener (Facebook, whatsapp, email, instagram etc)
- Call Logs
- Contact
- SMS
- Etc
-
i-spy Android https://github.com/JohnReagan/i-spy-android
- Camera
- Location
- Storage
- Etc
-
FinSpy
- Storage
- Phone information
- Call Sms Mms
- Contact
- GPS Location
- Voip record such Skype, WeChat, Viber, LINE etc
-
Monokle
- GPS location
- Audio record, call record
- Screen recording
- Keylogger and fingerprint-device duplicate
- History browser and Call log, SMS Email logs, create a Call and SMS
- Contact and calender
- Shell as root (rooted/rootable)
-
Cerberus Banking [GUI]
- Bots
- Bank and CC Logs information
- Mail logs
- SMS, Call (+Forward), Contact, GPS, Audio
- Monitoring all activity / logs
- Push to turnoff Play Protected (Disable)
- Download, Install, Remove Apps
- Lock device
-
Joker (infect many apps in playstore)
- SMS CALL CONTACT
- Storage
- Manipulating subscription (money)
-
Hawkshaw https://github.com/saksham2410/Android-RAT---Hawkshaw
- similar "Adroid Spy App"
- Call, SMS, Contact, Phone Information
- Camera, Audio, Location, Storage
- Account Detail
- Lock, Vibrate, Flash
- Owner Access (Boot)
- Inject, Install / Remove Apps
- Logs and Keylog (messenger, socialmedia)
-
Strandhogg
- Hijack Session, apps log
- Almost all permission
-
TearDroid PHP https://github.com/ScRiPt1337/Teardroid-phprat
- Retrieve Contact
- Retrieve SMS
- Retrieve running Services
- Retrieve Device Location (😟 Only work when the app is open on newer devices)
- Retrieve Call Logs
- Run Shell Command ( use findphno command in run shell command to get device phone number and use findx:pdf to find all the pdf files on the device )
- Change Wallpaper
- Send SMS
- Make Call
- Get Installed Apps
- Download File
- Read Notification
-
AndroSpy https://github.com/qH0sT/AndroSpy
- Camera
- SMS Contact Call
- Storage
- Install, Inject
-
GravityRAT
- SMS Contact Call
- Storage
- exfiltrate
-
BlueEagle jRAT
- similar "jRAT"
- Call, SMS, Contact, Phone Information
- Camera, Audio, Location, Storage
- Account Detail
- Owner Access (Boot)
- Block google protect
-
TalentRAT https://github.com/honglvt/TalentRAT
- SMS CALL CONTACT
- GPS
- CAMERA AUDIO
-
WH-RAT https://github.com/wh-Cyberspace/WH-RAT [GUI] (Similar with SpyNote NjRAT)
- x soon
- etc
-
Mass RAT https://github.com/NYAN-x-CAT/Mass-RAT
- sms call
- storage
- camera, etc
-
HaxRAT https://github.com/Hax4us/haxRat
- storage, camera
- audio, etc
-
Rogue RAT
- Camera, Audio
- Storage, GPS
- Keylog, etc
-
LodaRAT
- Camera, Microphone, Phone
- Storage, GPS
- Install, Account Credentials, etc
-
Rafel RAT https://github.com/swagkarna/Rafel-Rat
- GPS, Storage
- Camera, Audio, Phone
- Ransomware ? (Syntax)
- Browserhistory (prefer to syntax)
-
StrongPity
- GPS, Storage
- Phone, Boot, Network Info
-
ERMAC
- SMS, CALL, CONTACT
- InstallApps, GetApps, Inject
-
Android Spyware https://github.com/CanciuCostin/android-spyware
- SMS, Call, Contact, Device Information
- InstallApps, GetApps, Inject
- Cam, Storage, Mic
- Adb command control
-
BRAT (Brazilian RAT)
- Install and remove apps, GetApps, Inject
- Factory Reset
- Admin Control
-
Nivistealer (web steal based - allow/permission interaction) https://github.com/swagkarna/Nivistealer
- IP, GPS, Device information
- Camera, steal clipboard
- set phishing site
-
DogeRAT
- Install and remove apps, GetApps, Inject
- Camera, SMS, Keylogger
- Admin Control etc
-
Dash [GUI] https://github.com/muneebwanee/Dash
- Camera
- Multiple Child clients
- Hidden app icon (stealth mode)
- Real-time location.
- Recording calls: incoming/outgoing.
- SMS: received/sent.
- Environment recording.
- Take pictures.
- Keylogger.
- Phishing social network.
- Notifications received: Whatsapp, Instagram, Messenger.
-
AIRAVAT https://github.com/Th30neAnd0nly/AIRAVAT
- Storage, Admin Permission, List App
- SMS, Call, Contact
- Camera, Audio, Screenshot
- Ransomware, Shell Command
-
IMG-RAT
- Storage, Camera, Audio
- SMS, Call, Contact
- Keylogger, Shell
-
Nexus
- Storage, Camera, Audio
- SMS, Call, Shell, Location, Keylogger
- Inject Banking, Crypto app
- 2FA app
-
Gigabud RAT
- Screen record, storage
- Install package
- Keylogger
-
TecSpy https://github.com/bmshifat/TecSpy
- SMS, Call, Contact, GPS, Storage
- Log notification, clipboard
- Admin adb command
-
MMRat
- Keylogger
- Screenrecord
- adb command
-
Chameleon
- Phishing, Keylogger
- Contact, SMS, Call, Storage
- Screen Capture, Overlay
- Proxy, Cookies Stealer
-
PounceKeys https://github.com/NullPounce/pounce-keys
- Hidden app icon (stealth mode)
- Keylogger
- Get phone’s information
- Log notification, clipboard
-
-
-
-
-
-
-
