RustRAT

RustRAT is a project to write a Remote Access Trojan in Rust. For more details about the project, see https://www.wodinaz.com/.

This repository contains several folders with different projects.

• rustrat-client The RAT itself
• rustrat-server The server listening for incoming connections (not written yet)
• payloads Projects that compiles down to WebAssembly for execution and helper libraries for payload creation

Build instructions

If the database schema is changed, a new example database needs to be created. First the code in rustrat-server to initialize an empty database must be updated, then a new example database must be created. This can be accomplished by executing the following commands:

• cargo run --bin update-dbtemplate
• cargo sqlx -D sqlite://rustrat-server/dbtemplate.sqlite3?mode=ro prepare --merged

Usage

Rat to server communication

• cd payloads
• cargo build
• cd ../rustrat-server
• cargo run # Make sure to note the public key, open a new terminal
• cargo run --bin rustrat-client-exe rustrat-client-exe rat localhost <public key from rustrat-server>
• A message box should eventually appear

Run wasm blobs

• rustrat-client-exe.exe wasm path\to\webassembly.wasm function_name
• rundll32 rustrat_client.dll,rundll_run path\to\webassembly.wasm function_name

Note that the functionality to execute compiled WebAssembly will be moved to a separate crate for development/debugging purposes.