You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
SEO: This README targets searches for: "Android RAT", "Android remote access trojan", "Android RAT sandbox", "mobile post-exploitation lab", "Android malware analysis", "Android pentest lab", "Android RAT demo", "Android WebView RAT".
5
+
Suggested GitHub topics/tags (add to repo): android, android-rat, rat, remote-access-trojan, mobile-security, malware-analysis, pentest, offensive-security, red-team, android-webview, sandbox, lab
6
+
-->
4
7
5
-
**Audience:** Students, researchers, instructors, and lab/ conference attendees.
6
-
**Purpose:** Demonstrate simulated Android post‑exploitation workflows inside a fully isolated lab. This repository exists for **education and research only**.
F3‑MANTA — an **educational Android RAT sandbox** and **Android post‑exploitation lab** demonstrating Android WebView samples, safe payload concepts, build recipes, and defensive detection/hardening guidance for researchers and instructors.
12
+
13
+
**Audience:** Students, researchers, instructors, red/blue teams, and conference/lab attendees.
14
+
**Purpose:** Reproduce and explain Android post‑exploitation (Android RAT) behaviors in a **safe, auditable, isolated** environment for **education, research, and defensive** training only.
## TL;DR — Android RAT lab, analysis sandbox, and demo-ready artifacts
23
+
24
+
This repository contains a **benign Android WebView sample**, exact build steps, lab artifacts, and safe demo/playback guidance designed for **Android RAT** research and teaching. Use **only in isolated environments** (VM snapshots, host‑only networks). Obtain **written authorization** prior to testing any systems you do not own.
15
25
16
-
A polished, benign Android WebView sample, build instructions, lab artifacts, and safe demo guidance. **Run only inside controlled, isolated environments** (VM snapshots, host‑only networks). Obtain written authorization before testing anything you do not own.
26
+
> Keywords included for discoverability: **Android RAT**, **Android Remote Access Trojan**, **Android malware analysis**, **Android post‑exploitation**, **mobile pentest lab**, **Android WebView RAT**, **red team Android**.
17
27
18
28
---
19
29
20
30
## Table of Contents
21
31
22
-
-[F3‑MANTA — Mobile Attack \& Network Testing Arena (Educational Sandbox)](#f3manta--mobile-attack--network-testing-arena-educational-sandbox)
23
-
-[TL;DR](#tldr)
32
+
-[F3‑MANTA — Mobile Attack \& Network Testing Arena (Android RAT)](#f3manta--mobile-attack--network-testing-arena-android-rat)
33
+
-[TL;DR — Android RAT lab, analysis sandbox, and demo-ready artifacts](#tldr--android-rat-lab-analysis-sandbox-and-demo-ready-artifacts)
24
34
-[Table of Contents](#table-of-contents)
25
35
-[About](#about)
36
+
-[Why F3‑MANTA (Android RAT sandbox)](#why-f3manta-android-rat-sandbox)
-[Build the example APK (exact commands)](#build-the-example-apk-exact-commands)
30
41
-[Payload creation, binding, and runtime listener — **REDACTED**](#payload-creation-binding-and-runtime-listener--redacted)
@@ -41,43 +52,57 @@ A polished, benign Android WebView sample, build instructions, lab artifacts, an
41
52
42
53
## About
43
54
44
-
F3‑MANTA is an educational sandbox designed to reproduce and explain Android post‑exploitation behaviors in a **safe, auditable, and isolated** environment. Use it for live demos, slides, or hands‑on labs only when the full lab isolation and permissions are in place.
45
-
The ultimate Android device control tool, empowering you with seamless, secure, and limitless control over target device
46
-
F3-Manta is powered by the latest and greatest technologies, ensuring a top-tier experience
55
+
F3‑MANTA is an **educational Android RAT sandbox** and **mobile post‑exploitation lab** that demonstrates core concepts commonly discussed in Android RAT research:
56
+
57
+
- Android RAT architecture (implant ↔ handler/listener)
58
+
- WebView‑based Android samples and safe instrumentation
59
+
- APK build/rebuild workflows for analysis and auditing
60
+
- Static and dynamic indicators of tampering (smali / manifest changes)
61
+
- Lab hygiene and isolation for safe malware analysis
62
+
63
+
This README intentionally uses common and alternate search terms (Android RAT, Android remote access trojan, mobile RAT, Android malware analysis, Android pentest lab) so researchers looking for Android RAT sandboxes and demos will find F3‑MANTA.
47
64
48
65
---
49
-
## Features
50
66
51
-
- 🔴 Real time
52
-
- 🌐 Custom web view
53
-
- 🔔 Notification reader
54
-
- 🛰️ Receive device location
55
-
- ✉️ Receive all target messages
56
-
- ✉️ Send SMS with target device to any number
57
-
- 👤 Receive all target contacts
58
-
- 💻 Receive list of all installed apps in target device
59
-
- 📷 Capture main and front camera
60
-
- 🎙 Capture microphone (with custom duration)
61
-
- ✅️ Auto start after device boot
62
-
- 🤖 Auto permission
63
-
- 🖥️ Screenshot (get screenshot from your victim device)
64
-
- 🔐 Injection (inject application automatically with any login or any page, unlimited)
65
-
- 🔐 Open any phishing page in victim device
66
-
- 📒 Gallery puller (get all photos available in gallery)
67
-
- 📁 Receive any file or folder from target device
68
-
📁 Delete any file or folder from target device
69
-
- 📁 Powerful file manager
70
-
- 🤖 Undetectable by antivirus
71
-
- And more...
67
+
## Why F3‑MANTA (Android RAT sandbox)
68
+
69
+
- Designed specifically for **education and defensive research** into Android RAT techniques and detection.
70
+
- Includes **benign demo artifacts** and a clear, auditable build process so instructors can teach Android post‑exploitation concepts without exposing live exploit recipes in the public repo.
71
+
- Emphasizes **lab isolation**, reproducible demos, and detection/mitigation guidance for defenders.
72
72
73
73
---
74
74
75
-
## Disclaimer & Ethics
75
+
## Features
76
+
77
+
- 🔴 Real time monitoring (demo telemetry)
78
+
- 🌐 Custom WebView sample (benign demo app)
79
+
- 🔔 Notification reader (demo telemetry)
80
+
- 🛰️ Receive device location (for lab demo)
81
+
- ✉️ Read target messages (demo / simulated)
82
+
- ✉️ Send SMS with target device (lab-only)
83
+
- 👤 List and export target contacts (demo)
84
+
- 💻 Enumerate installed apps (analysis artifact)
85
+
- 📷 Capture front & back camera (demonstration, emulator)
86
+
- 🎙 Microphone capture (with duration limits in demo)
87
+
- ✅️ Auto start after device boot (demo behaviour)
88
+
- 🤖 Auto permission handling (demo / simulated flows)
89
+
- 🖥️ Screenshot capture (for analysis playback)
90
+
- 🔐 Injection (conceptual — injection examples are not published here)
91
+
- 🔐 Open phishing pages in a controlled demo environment (simulated)
92
+
- 📒 Gallery puller (pull gallery assets from lab device)
- 🤖 Claims of "undetectable" are **presented as research claims** — treat these as analysis topics, not recommendations; this repo does **not** provide evasion recipes.
95
+
- And more — focused on teaching defenders how to detect these behaviours.
96
+
97
+
> NOTE: Feature list mirrors the original repository content; all operational commands remain unchanged below.
98
+
99
+
---
76
100
77
-
> **Important:** This repository is strictly for **educational and defensive** purposes. You must have **explicit written permission** to test or interact with any device, network, or resource you do not own.
101
+
## Disclaimer & Ethics (required)
78
102
79
-
Misuse of the material in this repository may be illegal and unethical. If you are unsure whether an action is permitted, **stop** and escalate to your legal/compliance team.
103
+
> **Important:** This repository is strictly for **educational, research, and defensive** purposes. You must have **explicit written permission** to test or interact with any device, network, or resource you do not own.
80
104
105
+
Misuse of materials in this repository may be illegal and unethical. If you are unsure whether an action is permitted, **stop** and escalate to your legal/compliance team.
F3‑MANTA — an **educational Android RAT sandbox** and **Android post‑exploitation lab** demonstrating Android WebView samples, safe payload concepts, build recipes, and defensive detection/hardening guidance for researchers and instructors.
12
+
13
+
**Audience:** Students, researchers, instructors, red/blue teams, and conference/lab attendees.
14
+
**Purpose:** Reproduce and explain Android post‑exploitation (Android RAT) behaviors in a **safe, auditable, isolated** environment for **education, research, and defensive** training only.
## TL;DR — Android RAT lab, analysis sandbox, and demo-ready artifacts
23
+
24
+
This repository contains a **benign Android WebView sample**, exact build steps, lab artifacts, and safe demo/playback guidance designed for **Android RAT** research and teaching. Use **only in isolated environments** (VM snapshots, host‑only networks). Obtain **written authorization** prior to testing any systems you do not own.
25
+
26
+
> Keywords included for discoverability: **Android RAT**, **Android Remote Access Trojan**, **Android malware analysis**, **Android post‑exploitation**, **mobile pentest lab**, **Android WebView RAT**, **red team Android**.
27
+
28
+
---
29
+
30
+
## Table of Contents
31
+
32
+
-[F3‑MANTA — Mobile Attack \& Network Testing Arena (Android RAT)](#f3manta--mobile-attack--network-testing-arena-android-rat)
33
+
-[TL;DR — Android RAT lab, analysis sandbox, and demo-ready artifacts](#tldr--android-rat-lab-analysis-sandbox-and-demo-ready-artifacts)
F3‑MANTA is an **educational Android RAT sandbox** and **mobile post‑exploitation lab** that demonstrates core concepts commonly discussed in Android RAT research:
46
+
47
+
- Android RAT architecture (implant ↔ handler/listener)
48
+
- WebView‑based Android samples and safe instrumentation
49
+
- APK build/rebuild workflows for analysis and auditing
50
+
- Static and dynamic indicators of tampering (smali / manifest changes)
51
+
- Lab hygiene and isolation for safe malware analysis
52
+
53
+
This README intentionally uses common and alternate search terms (Android RAT, Android remote access trojan, mobile RAT, Android malware analysis, Android pentest lab) so researchers looking for Android RAT sandboxes and demos will find F3‑MANTA.
54
+
55
+
---
56
+
57
+
## Why F3‑MANTA (Android RAT sandbox)
58
+
59
+
- Designed specifically for **education and defensive research** into Android RAT techniques and detection.
60
+
- Includes **benign demo artifacts** and a clear, auditable build process so instructors can teach Android post‑exploitation concepts without exposing live exploit recipes in the public repo.
61
+
- Emphasizes **lab isolation**, reproducible demos, and detection/mitigation guidance for defenders.
62
+
63
+
---
64
+
65
+
## Features (what this Android RAT demo shows)
66
+
67
+
- 🔴 Real time monitoring (demo telemetry)
68
+
- 🌐 Custom WebView sample (benign demo app)
69
+
- 🔔 Notification reader (demo telemetry)
70
+
- 🛰️ Receive device location (for lab demo)
71
+
- ✉️ Read target messages (demo / simulated)
72
+
- ✉️ Send SMS with target device (lab-only)
73
+
- 👤 List and export target contacts (demo)
74
+
- 💻 Enumerate installed apps (analysis artifact)
75
+
- 📷 Capture front & back camera (demonstration, emulator)
76
+
- 🎙 Microphone capture (with duration limits in demo)
77
+
- ✅️ Auto start after device boot (demo behaviour)
78
+
- 🤖 Auto permission handling (demo / simulated flows)
79
+
- 🖥️ Screenshot capture (for analysis playback)
80
+
- 🔐 Injection (conceptual — injection examples are not published here)
81
+
- 🔐 Open phishing pages in a controlled demo environment (simulated)
82
+
- 📒 Gallery puller (pull gallery assets from lab device)
- 🤖 Claims of "undetectable" are **presented as research claims** — treat these as analysis topics, not recommendations; this repo does **not** provide evasion recipes.
85
+
- And more — focused on teaching defenders how to detect these behaviours.
86
+
87
+
> NOTE: Feature list mirrors the original repository content; all operational commands remain unchanged below.
88
+
89
+
---
90
+
91
+
## Disclaimer & Ethics (required)
92
+
93
+
> **Important:** This repository is strictly for **educational, research, and defensive** purposes. You must have **explicit written permission** to test or interact with any device, network, or resource you do not own.
94
+
95
+
Misuse of materials in this repository may be illegal and unethical. If you are unsure whether an action is permitted, **stop** and escalate to your legal/compliance team.
96
+
97
+
---
98
+
99
+
## Prerequisites (exact commands — unchanged)
100
+
101
+
> Run these **inside an isolated lab VM** (Kali Linux / Debian / Ubuntu example). These commands install an OpenJDK and Android command‑line tools.
0 commit comments