# Viralmaniar/Powershell-RAT

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Repository: https://github.com/Viralmaniar/Powershell-RAT
Canonical: https://ross.abutalabs.com/products/powershell-rat
Homepage: https://github.com/Viralmaniar/Powershell-RAT
Language: Python
License Family: other
Topics: redteaming, hacking, hacking-tool, backdoor, rat, remoteaccess, trojan-rat, trojan, powershell, pentesting, penetration-testing, fud
Last push: 2022-10-20T04:36:26+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3094, "days_push": 1413, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1207, forks 249 (observed 2026-08-28T04:03:59.528857+00:00)

## What it is
A Python-based remote access trojan (RAT) for red team engagements that backdoors Windows machines via scheduled tasks and exfiltrates screenshots of user activity as Gmail email attachments. It is an offensive security tool intended for authorized penetration testing and educational use.

## Use cases
- backdoor a windows machine during a red team engagement
- exfiltrate screenshots via gmail as email attachments
- capture user activity with screen capture on a compromised host
- set up persistence using scheduled tasks disguised as antivirus updates
- test antivirus detection against a FUD rat
- learn how remote access trojans and data exfiltration work

## When to choose
- you are running an authorized red team or penetration test on Windows targets
- you need a simple email-based exfiltration channel using Gmail
- you want a lightweight educational example of RAT techniques

## When to avoid
- you lack explicit written permission to test the target system
- you need a stealthy modern C2 framework with encryption and evasion
- you require cross-platform support beyond Windows
- you need a maintained tool with a license and active development

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, penetration-testing, osint
- domain: security, penetration-testing, windows
- platform: windows, python, cli
- tags: rat, red-team, backdoor, data-exfiltration, screen-capture, gmail, powershell, offensive-security, post-exploitation

## Member repositories
- Viralmaniar/Powershell-RAT (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:59.528857+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:18:57.357253+00:00, confidence not recorded.
  - readme: https://github.com/Viralmaniar/Powershell-RAT (fetched 2026-08-28T04:03:59.528857+00:00, sha 98ce52db3a8b)
  - homepage: https://github.com/Viralmaniar/Powershell-RAT (fetched 2026-08-29T12:26:44.045810+00:00, sha de57fb9c5a11)
- Data as of 2026-08-30T08:39:29.467469+00:00.