Kali Linux 2018: Windows Penetration Testing - Second Edition

Remote Access Tools

Remote Access Tools (RATs) are small programs that can be used to call out to a server and maintain a connection to that server, sometimes called a Command and Control server, or CnC. Using that connection from the server, the attacker can then access the victim's internal network from the internal machine, or use it as a pivot to exploit the network from the attacker's remote machine.

Pivots are my personal favorites. With pivots, there is no need to upload tools to another victim's machine, which can trigger anti-virus software and other security monitoring that workstation during the upload. Once the RAT is in place, you can now pivot from the first victim's machine. Also, it just isn't practical to upload a version ...