CURSE RAT is a sophisticated, open-source Remote Administration Tool (RAT) designed for Android. It features a high-performance Node.js C2 server and a feature-rich Java-based Android client. This project is built for educational purposes and security research, demonstrating advanced networking, APK surgery, and real-time telemetry.
The project features the THOR Cyber Dashboard, a high-fidelity SPA (Single Page Application) that provides:
- 3D Global Targeting: Interactive globe centered on connected nodes.
- Multi-Port Listener: Manage multiple TCP listeners dynamically.
- Real-Time Telemetry: Live tracking of data rates (KB/s), packet counts, and system health.
- Advanced Client Center: Triple-pane command center for managing all active nodes.
- Advanced Payload Builder: Deep APK surgery (Package renaming, Manifest patching, Resource injection).
- Live Surveillance: Real-time Camera streaming (5 FPS hardware throttled) and Screen Sharing.
- Data Management: Interactive File Manager, SMS logs, Contacts, and Call logs.
- Security Research Tools: Keylogger, GPS tracking (Leaflet integration), and Device Telemetry.
- Stability: Optimized for Android 8.0 to 14 with robust foreground service persistence.
- Server: Node.js (v16+) & npm
- Client Build: Java 11 (JDK) & Android SDK
- OS: Linux (Recommended) or Windows
- Clone the repository:
git clone https://github.com/your-username/Curse_RAT.git cd Curse_RAT - Install Dependencies:
cd server && npm install
- Setup Environment: Ensure
apktool,jarsigner, andzipalignare in your PATH. - Run Server:
node server.js or npm start
- Clone the repository:
git clone https://github.com/your-username/Curse_RAT.git cd Curse_RAT
- Install Dependencies:
cd server; npm install
- Setup Environment:
- Install Java 11 JDK and add to Environment Variables.
- Download apktool.jar and place it in the server folder or PATH.
- Ensure
jarsigner(from JDK) andzipalign(from Android SDK) are accessible.
- Run Server:
node server.js
- /server: Node.js C2 Server, Builder logic, and Web Dashboard.
- /client: Java source code for the Android application (Gradle project).
- /output: Location for generated/patched APKs.
This project is for educational purposes only. The authors are not responsible for any misuse of this tool. Use it only on devices you own or have explicit permission to test.
Special thanks to AhMyth, from whose project I referred and learned many concepts that made CURSE RAT possible.
Keywords: Android RAT, Remote Administration Tool, C2 Server, Node.js, Java Android, Malware Analysis, Security Research, APK Builder, RAT Dashboard.