Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Lab-RATS-v1.6 — Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction through a sleek web interface and supports the newest modern Android releases. | Kitploit
Tools/GitHubGitHub/k4n3co/lab-rats-v1.6
Android SecurityPhishing ToolsPayload GenerationPersistence MechanismsIDS/IPS EvasionMobile App PentestingData ExfiltrationPost-ExploitationCommand and ControlRed TeamingRemote Access Trojan
802811922h 12m agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
k4n3co/lab-rats-v1.6

Lab-RATS-v1.6

Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction through a sleek web interface and supports the newest modern Android releases.

View Repository

Screenshot 2026-10-25 at 2 06 52 AM


Typing Banner

Lightweight Android-Based Remote Administration Tool for Security: (L.A.B. - R.A.T.S)

I'd like to send a special Thank You to the team at SecTools.dev for the fantastic addition of Lab-RATS to their professionally curated tool lists. Just being on the same exclusive list as ANY of the legendary tools on their site is beyond incredible!

Developed from the ground up by K4N3CO, Lab-RATS is an open-source, lightweight Android Remote Administration framework packed with powerful monitoring and interaction capabilities. The system automates the generation of custom, signed .apk files for deployment onto any Android device, providing full device telemetry via a sleek, web-based C2 dashboard. Built to adapt to strict modern mobile environments, it delivers a robust feature suite that operates reliably across both legacy and the newest Android releases.

Typing Banner

Lab-RATS leverages the unique characteristics of publicly routable IPv6 addresses assigned by modern Wi-Fi and cellular (5G/LTE) carriers. By binding the control server directly to a device's Global Unicast Address (GUA), the tool completely bypasses Carrier-Grade NAT (CGNAT) and inbound firewall restrictions. This architecture enables seamless, Zero-Configuration peer-to-peer (P2P) remote access from any modern web browser worldwide—completely eliminating the need for router manipulation, port forwarding, or third-party tunneling services like Ngrok or Pinggy.

📸 Click to View IPv6 Exploit Vector

Full Web Page Screenshot

[!NOTE] Lab-RATS now supports IPv4 connections by hosting on Render.com (Free Tier Supported). See the "Command & Control" Option 2 section below for setup guide.

Typing Banner

🔐 Remote C2 Security & Secure Handshake:

  • The web dashboard is protected by a secure login wall (Default Password: admin1337). The password can be changed directly from the Terminal home page for enhanced security.
  • Implemented a masked credential handshake. Passwords are reversed and Base64 encoded (0x_ prefixed) on the client-side before transmission, rendering them invisible to browser Network/Payload inspectors.

📦 Automated APK Generation, Identity Control & Density Scaling:

  • Instantly build signed.apk for production and testing.
  • Fully customize App Name, Package ID, and Minimum SDK.
  • Resize logos automatically for all Android screen densities.

📱 PC/Mobile Responsive:

  • The remote web interface is fully optimized for both PC and smartphone browsers, featuring a touch-friendly layout, adaptive navigation tabs, and scalable UI elements for monitoring from any device.

Typing Banner

💉 APK Payload Delivery Vectors:

  • The Weaponization Engine has been overhauled to support multiple high-success delivery methods (Stealth PDF, Zero-Click MP4, Meeting Invite and Many More), ensuring reliable access across all modern mobile environments.

🛡️ Evasion Engine:

  • Undetectable by Samsung Knox, McAfee and Google Play Protect.
  • Deep Stealth HTML Shield: The C2 dashoard utilizes Shadow DOM Cloaking and Base64 Payload Wrapping. Browser "Elements" inspection is zeroed-out, and the tactical structure is ghosted from analysts.
  • Web Hardening: Assets (JS/CSS) are minified and obfuscated; featuring anti-debugging loops and interaction locks (Right-Click, F12) to prevent unauthorized analysis.
  • Dynamic Code Obfuscation: Build-time randomization of logic flow and class names via ProGuard/R8 integration.
  • Encrypted Local Telemetry: Internal system logs are encrypted at build-time, rendering them unreadable to standard mobile forensic tools.

🎭 Stealth App Decoys:

Remotely swap the entire Lab-RATS app identity and icon instantly using the "Masquerade Library" of convincing, fully functional Clones:

  • 👀 Play Protect (Default): Used for initial install it simulates a system stability update and auto-grants all permissions (other than Accessibility services) during the process, achieving highly successful installs.
  • 🧮 Calculator: Performs actual math with a tactical logic engine.
  • 🌦️ Weather App: Displays real-time localized forecasts via Open-Meteo API.
  • 🛡️ Software Update: Simulates a legitimate system update screen to build target trust.
  • 🐭 Lab-Rats & System Stability Services: Completely unmasked and directly opens the C2 server interface on device.
Download Tool