All Categories → Security → malware-research

Top 94 malware-research open source projects

A tool to cluster similar executables (PEs, DEXs, and etc), extract common signature, and generate Yara patterns for malware detection.

✭ 23

c python CMake C++malware-research malware-samples yara ssdeep malware-detection

MalwareDatabase

Malware samples for analysis, researchers, anti-virus and system protection testing.(1300+ Malware-samples!)

Malware hashes for open source projects.

✭ 31

ioc database malware hash md5 archive antivirus malware-analysis malware-research virustotal threat-intelligence virusshare

Fake-Sandbox-Artifacts

This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

✭ 138

python malware-research anti-analysis anti-sandbox anti-vm anti-emulation sandbox-detection deception-defense antivmdetection

Malware Analysis Zoo

✭ 25

ruby security malware-analyzer malware-analysis malware-research

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

✭ 68

javascript python HTML CSS shell Dockerfile malware-research yara yara-rules yara-manager yara-signatures

Malware-Machine-Learning

Malware Machine Learning

✭ 26

Jupyter Notebook machine-learning deep-learning malware cybersecurity malware-analysis malware-research

Python scripts for Malware Bazaar

✭ 90

python malware-research cyber-security

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

✭ 70

python static-analysis reverse-engineering disassembler cybersecurity infosec malware-analysis malware-research blueteam security-tools threat-intelligence infosectools

Collecting IOCs posted on Twitter

✭ 181

osint malware phishing malware-research phishing-attacks blueteam phishing-sites malware-detection phishing-detection

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

MalwareDatabase

One of the few malware collection

✭ 37

windows macos exploit malware trojan rogue ransomware malware-analysis malware-research worm virus-builder

Jaws is an invisible programming language! Inject invisible code into other languages and files! Created for security research -- see blog post

✭ 204

c Yacc Makefile Lex Roff interpreter compiler virtual-machine polyglot interpreted-programming-language malware-research c-programming security-research flex-bison

Malware similarity platform with modularity in mind.

✭ 70

python HTML javascript Mako Dockerfile CSS shell security attribution malware similarity cybersecurity malware-research

Vendor-Threat-Triage-Lookup

Lookup file hashes, domain names and IP addresses using various vendors to assist with triaging potential threats.

✭ 17

VBScript api intelligence query shodan geoip threat-hunting malware-research hashes domain-name threatgrid sinkhole rbl whois-lookup threats virustotal otx ip-address-lookup dbl emerging seclytics

Java-layer Android Malware Simplifier

✭ 17

python ruby javascript shell java android emulator optimization reverse-engineering malware deobfuscation malware-analyzer malware-analysis malware-research deobfuscator android-malware reverse-engineer-apk

flare-on-challenges

Write-ups for FireEye's FLARE-On challenges

✭ 24

PHP HTML reverse-engineering ctf-writeups ctf malware-analysis malware-research ctf-solutions ctf-challenges

malware-writeups

Personal research and publication on malware families

✭ 104

malware malwareanalysis malware-analyzer malware-analysis malware-research malware-samples malware-development malware-sample malware-detection malware-protection

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

✭ 25

C++python CMake compression sandbox malware forensics malware-research memory-dump

Community modules for FAME

✭ 55

python HTML Dockerfile framework malware infosec malware-analysis malware-research

Malice Yara Plugin

✭ 27

YARA plugin docker malware malware-analyzer malware-analysis malware-research yara malice malware-detection malice-plugin

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

✭ 297

C++CMake debugging virus reverse-engineering malware hacking anti-malware malware-analysis malware-research cracking malware-development reversing windows-hacking anti-reversing anti-debugging isdebuggerpresent checkremotedebuggerpresent

A Binary Genetic Traits Lexer Framework

✭ 303

C++python shell CMake c javascript machine-learning genetic-algorithm reverse-engineering malware genetic-programming malware-analysis malware-research yara

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

✭ 94

C++c python debugger reverse-engineering malware malware-analysis malware-research

Malware-Sample-Sources

Malware Sample Sources

✭ 214

virus malware malwareanalysis cybersecurity infosec viruses threat-hunting malware-analysis malware-research virus-scanning malware-samples threat-intelligence malware-sample malware-detection malware-database malware-dataset advanced-persistent-threat

AssemblyLine 4 - File triage and malware analysis

✭ 69

python Dockerfile malware-analyzer malware-analysis malware-research file-analysis malware-detection

BONOMEN - Hunt for Malware Critical Process Impersonation

✭ 42

rust windows unix malware-analysis malware-research

awesome-executable-packing

A curated list of awesome resources related to executable packing

✭ 720

security list awesome malware cybersecurity awesome-list malware-analysis binary-analysis malware-research packers awesome-lists malware-packers executable-packing packing-detection

⛔🛡️ WeDefend - Monitor and Protect Windows from Remote Access Trojan

✭ 23

java malware-analysis malware-research encryption-tool crypter malware-detection trojan-rat

Hashes of infamous malware

✭ 18

malware malwareanalysis cybersecurity malware-analysis malware-research threatintel

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

✭ 47

python ioc malware malware-research threat-sharing threatintel iocs hacktoberfest indicators fang defang indicators-of-compromise

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..

✭ 281

rust C++c Inno Setup machine-learning malware cybersecurity ransomware antivirus threat-hunting malware-analysis malware-research behavior-analysis impact exfiltration command-and-control edr

Collection of various malicious functionality to aid in malware development

✭ 904

C++c malware malware-research malware-development

61-94 of 94 malware-research projects