# TechNowHorse RAT (Remote Administrator Trojan) Generator for Windows/Linux systems **URL:** \ **Category:** Tools & Scripts\ **Tags:** hacking\ **Created:** [April 9, 2020, 1:10am UTC](https://onehack.st/t/technowhorse-rat-remote-administrator-trojan-generator-for-windows-linux-systems/78263 "2020-04-09T01:10:20Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Parizaad](https://onehack.st/user_avatar/onehack.st/parizaad/32/174871_2.png) [@Parizaad](https://onehack.st/u/Parizaad)\ **Post date:** [April 9, 2020, 1:10am UTC](https://onehack.st/t/technowhorse-rat-remote-administrator-trojan-generator-for-windows-linux-systems/78263/1 "2020-04-09T01:10:20Z")
# TechNowHorse TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3. ```auto This small python script can do really awesome work. ``` ![image](https://onehack.st/uploads/default/original/3X/e/4/e43204273c11db594c04d396b702290918f1c67e.jpeg) ## Features - Works on Windows/Linux - Notify New Victim Via Email - Undetectable - Does not require root or admin privileges - Persistence - Sends Screenshot of Victim PC’s Screen via email - Give Full Meterpreter Access to Attacker - Didn’t ever require metesploit installed to create trojan - Creates Executable Binary With Zero Dependencies - Create less size ~ 5mb payload with advance functionality - Obfusticate the Payload before Compiling it, hence Bypassing few more antivirus - Generated Payload is Encrypted with base64, hence makes extremely difficult to reverse engineer the payload - Function to Kill Antivirus on Victim PC and tries to disable the Security Center - Awesome Colourful Interface to generate payload - On Attacker Side: While Creating Payload, Script Automatically Detects Missing Dependencies & Installs Them - Able to add custom Icon to evil file - **Built-in Binder** which can bind Keylogger to **Any File** [.pdf, .txt, .exe etc], Running legitimate file on front end & evil codes in back-end as a service. - Checks for **Already Running Instance** on System, If running instance found, then only legitimate file is executed [**Multiple Instance Prohibiter**]. - Attacker can Create/Compile for Both **Windows/Linux OS** Using Linux System, But Can only Create/Compile **Windows** Executable using Windows Machine - **Retrieves Saved Passwords** from victim System and sends it to Attacker. Supported Retrives, Tries to Retrive Saved Passwords from : Chrome Browser WiFi #### Note: Custom Stealer is Coded, does not relies on LaZagne ## Tested On [![Kali)](https://camo.githubusercontent.com/d62dc6cb55793563d3715b6f465d3cf032199c8a/68747470733a2f2f7777772e676f6f676c652e636f6d2f73322f66617669636f6e733f646f6d61696e3d68747470733a2f2f7777772e6b616c692e6f72672f)](https://www.kali.org/) **Kali Linux - ROLLING EDITION** [![Windows)](https://camo.githubusercontent.com/adaad5f396ce02536e6d30587ae48c34f3cf7584/68747470733a2f2f7777772e676f6f676c652e636f6d2f73322f66617669636f6e733f646f6d61696e3d68747470733a2f2f7777772e6d6963726f736f66742e636f6d2f656e2d696e2f77696e646f77732f)](https://www.microsoft.com/en-in/windows/) **Windows 8.1 - Pro** [![Windows)](https://camo.githubusercontent.com/adaad5f396ce02536e6d30587ae48c34f3cf7584/68747470733a2f2f7777772e676f6f676c652e636f6d2f73322f66617669636f6e733f646f6d61696e3d68747470733a2f2f7777772e6d6963726f736f66742e636f6d2f656e2d696e2f77696e646f77732f)](https://www.microsoft.com/en-in/windows/) **Windows 7 - Ultimate** ## Following is the limitations of meterpreter payload generated using metasploit:- - Have to run the Metasploit Listener before executing backdoor - Backdoor itself don’t become persistence, we have to use the post exploitation modules in order to make backdoor persistence. And post exploitation modules can only be used after successful exploitation. - Didn’t Notify us whenever payload get executed on new system. We all know how powerful the Meterpeter payload is but still the payload made from it is not satisfactory. ## Following are the features of this payload generator which will give you a good idea of this python script:- - Uses Windows registry to become persistence in windows. - Also manages to become persistence in linux system. - Payload can run on LINUX as well as WINDOWS. - Provide Full Access, as metasploit listener could be used as well as supports custom listener (You can Create Your Own Listener) - Sends Email Notification, when ever payload runs on new system, with complete system info. - Generates payload within 1 minute or ever less. - Supports all meterpreter post exploitation modules. - Payload Can be Created on Windows as well as Linux system. ## New Screenshots: #### Getting Help [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/1.version1.4.PNG)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/1.version1.4.PNG) #### Generating payload [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/2.version1.4.PNG)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/2.version1.4.PNG) ### Also Refer These Old Images ## ~Old Screenshots: #### Getting Help [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/1.help.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/1.help.png) #### Running paygen.py Script [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/2.running_script.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/2.running_script.png) #### When RAT runs, it adds Registry to become persistence [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/3.added_registry_for_persistence.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/3.added_registry_for_persistence.png) #### Makes copy of itself and saved it inside Roming [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/4.rat_saved_roming.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/4.rat_saved_roming.png) #### Report sended by RAT [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/5.report_from_rat.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/5.report_from_rat.png) #### Getting Notification From Victim PC [![](https://github.com/Technowlogy-Pushpender/technowhorse/raw/master/img/6.getting_notification.png)](https://github.com/Technowlogy-Pushpender/technowhorse/blob/master/img/6.getting_notification.png) > **[GitHub - PushpenderIndia/thorse: THorse is a RAT (Remote Administrator Trojan)...](https://github.com/PushpenderIndia/thorse)** > > THorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3. ---
**Author:** ![JovialH4ckr](https://onehack.st/user_avatar/onehack.st/jovialh4ckr/32/32203_2.png) [@JovialH4ckr](https://onehack.st/u/JovialH4ckr)\ **Post date:** [April 9, 2020, 2:25am UTC](https://onehack.st/t/technowhorse-rat-remote-administrator-trojan-generator-for-windows-linux-systems/78263/2 "2020-04-09T02:25:57Z")
Man, that’s intimidating. 😷