An event driven remote access trojan for experimental purposes.

erat

An event driven remote access trojan for experimental purposes.

This example is very simple and leverages ssh failed login events to trigger erat to open communications, take actions, or exfil data back to controller or peers.

erat Could in theory watch for events in many different og types but this is a POC for research only, more advanced version to be kept private.