RAT Control Panel v2.0 is a modern, secure Remote Administration Tool designed for authorized system administration and educational purposes. Built with enterprise-grade security features and a user-friendly interface.
This software is intended ONLY for:
- Authorized system administration
- Educational and research purposes
- Penetration testing with explicit permission
- Security research in controlled environments
Users are solely responsible for ensuring compliance with all applicable laws and regulations.
- JWT Authentication - Secure token-based authentication
- AES-256-GCM Encryption - End-to-end encryption for all communications
- RSA Key Exchange - Secure session establishment
- Rate Limiting - DDoS protection and abuse prevention
- Input Validation - Comprehensive data sanitization
- Audit Logging - Complete activity tracking
- Microservices Design - Scalable and maintainable architecture
- React Frontend - Modern, responsive web interface
- FastAPI Backend - High-performance async API server
- WebSocket Communication - Real-time bidirectional communication
- Docker Support - Containerized deployment
- Plugin System - Extensible module architecture
- Real-time Dashboard - Live monitoring and control
- Multi-tenancy - Support for multiple organizations
- File Management - Secure file transfer and management
- Remote Shell - Secure command execution
- System Monitoring - Comprehensive system information
- Screenshot Capture - Remote desktop monitoring
- Keylogger - Keystroke monitoring (authorized use only)
- Webcam/Audio - Remote media capture
- Process Management - Remote process control
βββββββββββββββββββ βββββββββββββββββββ βββββββββββββββββββ
β React Web β β FastAPI β β Client β
β Frontend βββββΊβ Server βββββΊβ Application β
β (Port 3000) β β (Port 8000) β β β
βββββββββββββββββββ βββββββββββββββββββ βββββββββββββββββββ
β β β
β βββββββββββββββββββ β
βββββββββββββββΊβ PostgreSQL ββββββββββββββββ
β Database β
β (Port 5432) β
βββββββββββββββββββ
β
βββββββββββββββββββ
β Redis β
β Cache β
β (Port 6379) β
βββββββββββββββββββ
- Docker & Docker Compose (Recommended)
- Python 3.9+ (For manual installation)
- Node.js 18+ (For frontend development)
- PostgreSQL 13+ (For database)
- Redis 6+ (For caching)
-
Clone the repository
git clone https://github.com/your-repo/rat-control-panel-v2.git cd rat-control-panel-v2 -
Configure environment
cp .env.example .env # Edit .env with your configuration -
Start services
docker-compose up -d
-
Access the application
- Web Interface: http://localhost:3000
- API Documentation: http://localhost:8000/api/docs
- Grafana Dashboard: http://localhost:3001
-
Install server dependencies
cd server python -m venv venv source venv/bin/activate # On Windows: venv\Scripts\activate pip install -r requirements.txt
-
Configure database
# Create PostgreSQL database createdb rat_control_panel # Run migrations alembic upgrade head
-
Start server
uvicorn src.main:app --host 0.0.0.0 --port 8000 --reload
-
Install frontend dependencies
cd frontend npm install -
Start development server
npm start
-
Install client dependencies
cd client python -m venv venv source venv/bin/activate # On Windows: venv\Scripts\activate pip install -r requirements.txt
-
Configure client
cp config/client.json.example config/client.json # Edit configuration as needed -
Start client
python main.py
- End-to-end encryption using AES-256-GCM
- RSA key exchange for secure session establishment
- JWT authentication with configurable expiration
- Rate limiting to prevent abuse
- Input validation and sanitization
- Secure headers and CORS configuration
- Audit logging for all activities
- Change default passwords immediately
- Use strong encryption keys
- Enable HTTPS in production
- Regularly update dependencies
- Monitor audit logs
- Implement network segmentation
- Use firewall rules
- Follows OWASP security guidelines
- Implements zero-trust architecture
- Supports compliance auditing
- Regular security assessments
-
Clone repository
git clone https://github.com/your-repo/rat-control-panel-v2.git cd rat-control-panel-v2 -
Install development dependencies
pip install -r requirements-dev.txt
-
Setup pre-commit hooks
pre-commit install
-
Run tests
make test
make install # Install all dependencies
make build # Build all containers
make start # Start all services
make stop # Stop all services
make test # Run all tests
make lint # Run linting
make format # Format code
make clean # Clean up containers and volumes- Fork the repository
- Create a feature branch
- Make your changes
- Add tests for new functionality
- Ensure all tests pass
- Submit a pull request
- Prometheus metrics collection
- Grafana dashboards
- Health checks for all services
- Performance monitoring
- Error tracking
- Audit logging
- Client connection status
- Command execution statistics
- System resource usage
- API response times
- Error rates
- Security events
| Variable | Description | Default |
|---|---|---|
DATABASE_URL |
PostgreSQL connection string | Required |
REDIS_URL |
Redis connection string | Required |
JWT_SECRET |
JWT signing secret | Required |
ENCRYPTION_KEY |
AES encryption key | Required |
SERVER_HOST |
Server bind address | 0.0.0.0 |
SERVER_PORT |
Server port | 8000 |
DEBUG |
Enable debug mode | false |
LOG_LEVEL |
Logging level | INFO |
server/config/- Server configurationclient/config/- Client configurationfrontend/.env- Frontend environmentdocker-compose.yml- Docker services
Connection Issues
- Check firewall settings
- Verify network connectivity
- Ensure correct ports are open
Authentication Errors
- Verify JWT secret configuration
- Check token expiration
- Ensure correct credentials
Performance Issues
- Monitor system resources
- Check database performance
- Review log files
- Check the troubleshooting guide
- Review FAQ
- Open an issue on GitHub
- Contact support team
This project is licensed under the MIT License - see the LICENSE file for details.
This software is provided for educational and authorized administrative purposes only. Users must:
- Obtain explicit permission before using on any system
- Comply with all applicable laws and regulations
- Use only for legitimate security testing or administration
- Respect privacy and data protection laws
- Not use for malicious purposes
The developers are not responsible for any misuse of this software.
- Built with FastAPI
- Frontend powered by React
- UI components from Material-UI
- Database with PostgreSQL
- Caching with Redis
- Containerization with Docker
For support and questions:
- π§ Email: [email protected]
- π¬ Discord: Join our server
- π Documentation: docs.example.com
- π Issues: GitHub Issues
Built with β€οΈ for security professionals and educators
