brute-rat/README.md

Brute Ratel v1.4.5 - Red Team Command & Control Framework

Brute Ratel is a sophisticated red teaming and adversary simulation tool designed for penetration testers and security professionals. This repository contains Brute Ratel v1.4.5 (Blitzkrieg) with both server and GUI client components.

📋 Table of Contents

• Overview
• Components
• System Requirements
• Installation
• Quick Start
• Configuration
• Usage Guide
• Troubleshooting
• Legal & Ethical Use
• Support

Overview

Brute Ratel is a command and control (C2) framework that provides:

• C2 Server: HTTPS listener for agent communication
• War Room GUI: Qt-based graphical interface for operator control
• Agent Generation: Payload creation for Windows targets
• Post-Exploitation: Extensive toolkit for lateral movement, privilege escalation, and data exfiltration

Version: 1.4.5 (Blitzkrieg) License: Licensed to Rnd Lab - Delhi (valid till 03-20-2024)

Components

Core Files

• brute-ratel-linx64 - Main C2 server executable
• Teamserver - Server startup script (fixed to use correct binary)
• commander-runme - GUI client launcher
• lib64/commander - Qt-based GUI client
• Rungui.sh - Alternative GUI launcher with xmodlib handling

Configuration Files

• cert.pem, key.pem - SSL certificates for HTTPS
• ratel.conf - Client configuration for server connections
• server_confs/ - Profile configurations and payload templates

Support Tools

• krb5decoder - Kerberos ticket decoder
• adaptiveC2/ - Adaptive C2 scripts and connectors
• adhoc_scripts/ - Utility scripts and shellcode loaders

System Requirements

Minimum Requirements

• OS: Linux (Ubuntu/Debian/Kali recommended)
• Architecture: x86_64
• RAM: 4GB minimum, 8GB recommended
• Storage: 2GB free space

Dependencies

# Required packages
sudo apt update
sudo apt install nasm mingw-w64

# Optional for GUI (usually included in lib64/)
# sudo apt install libqt5webenginewidgets5 libqt5websockets5

Installation

1. Extract and Prepare

# Navigate to Brute Ratel directory
cd bruteratel_1.4.5/

# Verify permissions (already set, but can re-apply if needed)
chmod +x brute-ratel-linx64
chmod +x lib64/commander
chmod +x commander-runme
chmod 0444 xmodlib.bin

2. Install Dependencies

# Update package list and install required tools
sudo apt update
sudo apt install nasm mingw-w64

Quick Start

Starting the C2 Server

# Method 1: Using the Teamserver script (recommended)
./Teamserver -ratel -a admin -p password -h 127.0.0.1:8443 -sc cert.pem -sk key.pem

# Method 2: Direct execution
./brute-ratel-linx64 -ratel -a admin -p password -h 127.0.0.1:8443 -sc cert.pem -sk key.pem

Parameters:

• -a : Admin username (default: admin)
• -p : Admin password (default: password)
• -h : Listen address and port (default: 127.0.0.1:8443)
• -sc : SSL certificate file (default: cert.pem)
• -sk : SSL private key file (default: key.pem)

Starting the GUI Client (War Room)

# Method 1: Using commander-runme
./commander-runme

# Method 2: Using Rungui.sh (handles xmodlib backup)
./Rungui.sh

Connecting to Server

1. Launch the GUI client
2. Enter connection details:
   • C2 Host: 127.0.0.1:8443
   • Username: admin
   • Password: password
3. Click the Brute Ratel logo to connect

Configuration

Server Configuration

Edit ratel.conf to pre-configure server connections:

{
    "ratel_servers": {
        "localhost:8443": {
            "pass": "password",
            "user": "admin"
        }
    }
}

Profile Configuration

Pre-built profiles are available in server_confs/:

• http-profile.conf - Standard HTTP C2 profile
• doh-profile.conf - DNS-over-HTTPS profile
• demo-profile.conf - Demonstration profile
• payloadprofile.conf - Payload generation settings

SSL Certificate Replacement

To use your own certificates:

# Generate new certificates
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes

# Update server command with new certificate paths
./Teamserver -ratel -a admin -p password -h 0.0.0.0:8443 -sc /path/to/cert.pem -sk /path/to/key.pem

Usage Guide

Basic Workflow

1. Start Server: Launch C2 server on desired interface
2. Generate Payload: Use server interface to create agent executables
3. Deploy Agent: Execute payload on target system
4. Manage Sessions: Use War Room GUI to interact with compromised systems
5. Post-Exploitation: Perform lateral movement, privilege escalation, data collection

Common Server Commands

While the server is running, you can interact via the terminal:

• View connected agents
• Generate payloads with specific profiles
• Manage listeners and redirectors
• Configure agent behaviors

GUI Features

• Dashboard: Overview of all connected agents
• Agent Management: Interactive session control
• Module Browser: Built-in post-exploitation tools
• Log Viewer: Real-time operation logging
• Profile Editor: C2 profile customization

Troubleshooting

Common Issues

1. Server Won't Start

# Check permissions
chmod +x brute-ratel-linx64

# Check dependencies
nasm --version
x86_64-w64-mingw32-gcc --version

# Verify certificate files exist
ls -la cert.pem key.pem

2. GUI Client Shows OpenGL Error

QXcbIntegration: Cannot create platform OpenGL context, neither GLX nor EGL are enabled

This warning is non-fatal. The GUI should still function. To resolve:

# Install OpenGL/Mesa libraries
sudo apt install mesa-utils libgl1-mesa-glx

# For headless environments, use virtual display
sudo apt install xvfb
xvfb-run ./commander-runme

3. Connection Refused

• Verify server is running: netstat -tlnp | grep 8443
• Check firewall settings: sudo ufw allow 8443
• Ensure correct IP/port in connection settings

4. License Expired

The included license is valid until 03-20-2024. For extended use:

• Contact Brute Ratel for license renewal
• Visit: https://bruteratel.com

Log Files

• Server logs output to terminal (redirect with > server.log)
• GUI client logs to system console
• Agent logs available through GUI interface

Legal & Ethical Use

⚠️ IMPORTANT DISCLAIMER

Brute Ratel is a powerful security tool intended for:

• Authorized penetration testing
• Security research and education
• Red team exercises with proper authorization
• Defensive security training

Illegal use of this software is strictly prohibited. Users are responsible for:

• Obtaining proper authorization before testing
• Complying with all applicable laws and regulations
• Using only on systems they own or have explicit permission to test
• Adhering to responsible disclosure practices

The developers and distributors assume no liability for misuse of this software.

Support

Documentation

• api-ratel-war-room.pdf - API and War Room documentation
• releases.txt - Version history and release notes
• readme.txt - Basic installation guide

Community & Resources

• Official Website: https://bruteratel.com
• Updates and Downloads: https://bruteratel.com/tabs/download
• For licensing inquiries: Contact via official channels

Issue Reporting

For technical issues with this distribution:

1. Check troubleshooting section above
2. Verify system requirements and dependencies
3. Review server logs for error messages
4. Consult official documentation

---

🚀 Getting Started Checklist

• Install dependencies: nasm, mingw-w64
• Verify file permissions are set
• Start C2 server on desired interface
• Launch War Room GUI client
• Connect to server with credentials
• Review profile configurations
• Generate test payload (in lab environment)
• Familiarize with GUI interface and features

📝 Notes

• Default credentials: admin/password
• Default listen address: 127.0.0.1:8443
• SSL certificates included for immediate use
• GUI requires X11 display (or use xvfb for headless)
• Regular updates recommended from official sources

---

Last Updated: April 2026
Based on Brute Ratel v1.4.5 (Blitzkrieg)