Njrat Free Download – The Old School RAT That Still Works (2026 Guide)

[Blacksec]

NJRAT – STILL ALIVE, STILL USEFUL
​

Njrat is the grandpa of the RAT scene and honestly? It still runs fine in 2026. If you're just starting out with remote access tools, this is the one people point you to first. It's small, it's free, and it's been around so long that thousands of tutorials exist for it. Let's be real about what Njrat is: a Windows remote administration tool. You send someone a file, they run it, and you get full control of their computer. Desktop view, file access, keylogging, webcam, the classics, all there.
Why Njrat is still popular

• Free and everywhere, no paying for it, every forum has a copy.
• Tiny file size, the server can be under 100KB, which makes it easy to disguise.
• Easy to learn, the panel is simple. A kid can figure it out in an afternoon.
• Lots of tutorials, if you get stuck, someone already made a video about it.
• Runs on old and new Windows, even Windows 11 works if you use the right build.

Its age is both the strength and the weakness. On one hand, everyone knows how to use it. On the other hand, every antivirus on earth knows what it looks like. That's why the community rule is simple: never spread a Njrat server without running it through a crypter first.
What's inside the panel

• Remote desktop, watch their screen live.
• Keylogger, every key they press gets logged.
• File manager, upload, download, delete, open files.
• Registry editor, change their system settings from your side.
• Password recovery, grab saved passwords and cookies from their browser.
• Webcam and microphone control.
• Bypass UAC on most setups.
• Spread itself, it can drop copies of the server onto USB drives when they're plugged in.

That last one is a favorite trick: you infect one machine with a USB-spreader stub, and every pen drive they plug in becomes a carrier.
How to set up Njrat step by step

1. Download Njrat 0.7d (the most common build) and extract the panel.
2. Open the builder tab. Set your IP or hostname and a port, anything above 1000 works.
3. Choose your options: run on startup, hide the file, disable task manager, add persistence.
4. Build the server. Rename it to something boring, "invoice.exe", "photo_edit_setup.exe", or whatever matches your story.
5. Crypt it. This is not optional. Even the worst crypter beats raw Njrat.
6. Get it to your target. Email, Discord, fake software link, your choice.
7. Watch them appear in your panel, right click, and enjoy full control.

Njrat vs Xworm vs CraxsRAT
Quick comparison so you don't waste days:

• 
  Njrat
  - best for learning. Old, simple, free. Gets detected easily, so it's a beginner's tool.
• 
  Xworm
  - best Windows all-rounder. Better features, smoother panel, still lightweight. Our Xworm 5.6 guide covers it in detail.
• 
  CraxsRAT
  - the Android king. Screens, SMS, WhatsApp access from an infected phone. Different game entirely.

Common mistakes beginners make

• Testing the server on their own machine first and getting infected. Use a VM. ALWAYS a VM.
• Running the panel without a VPN. Your IP is sitting there in the panel's logs.
• Spreading through their own personal accounts. The trail leads straight back to them.
• Using the same stub twice. Antivirus learns fast, change your build each time.

Njrat setup FAQ

• 
  Is Njrat detected?
  Oh yes, very much. Crypt it every single time and it's fine.
• 
  Does Njrat work on Windows 11?
  Most builds run, some old options break. Test in a VM.
• 
  Why is my server not connecting?
  90% of the time it's the port not being open or the stub being blocked. Check your firewall and re-crypt.
• 
  Can I use Njrat over the internet?
  Yes, with port forwarding on your router or a VPS. On a local network it works instantly.

Njrat isn't the most advanced tool in the box, but it taught a whole generation of people how RATs work. Start here, learn the basics, test everything in a sandbox, and when you outgrow it, Xworm is waiting for you. BlackSec, home of the guides that actually tell you how it works.