0xSagaCity / POPPETX

Writing POC RAT for fun and skills, not profit. :)

POPPETX

What does what?

1. MainActivity.java
   This currently has just a small chunk that executes socketWork.java when onCreate gets called.

2. socketWork.java
   This contains our TCP Socket Stuff
   The IP address and PORT values need to be stored in NetworkConfig.java
   This also executes some module from module.java and returns the output back
   One exception to this is the takePhoto module that sends the data back in a new thread refer here

3. NetworkConfig.java
   Variables that would be changed by builder.py like the ones here need to be in separate files for less hassle.

4. modules.java
   Here we have almost every command and the stuff it does (RAT has very few modules currently need to add way more)

TODO

• Merge takeSelfie and takePhoto in one single method
• Clean some code and make server.py not just print stuff but write stuff in files.
• Add a broadcastReciever to start the app every time device boots.
• Add a Scheduler that would execute socketWork in background and not just when onCreate from MainActivity is called.
• Handle Runtime Permission Checks when trying to extract Contacts from the device.
• Add rootDetection module to make RAT do more stuff if root is available.
• Start building builder.py to become bob the builder.
• Add even more TODO's as we go through this ones untill this becomes a ball of depression to handle.

There is a plan to write a complete documentation of what part of RAT does what. What real malware has done something like this. What part does one need to look for while looking through a reversed malware and stuff.

Image used is from Smashicons