808 Open source projects that are alternatives of or similar to Malware-Zoo

Malware Sample Sources

Bringing you the best of the worst files on the Internet.

Malware Machine Learning

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Personal research and publication on malware families

A curated list of awesome resources related to executable packing

VirusTotal Wanna Be - Now with 100% more Hipster

Malware samples for analysis, researchers, anti-virus and system protection testing.(1300+ Malware-samples!)

A Python RESTful API framework for online malware analysis and threat intelligence services.

One of the few malware collection

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

Collection of scripts for different malware analysis tasks

Android virtual machine and deobfuscator

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

WinDBG Anti-RootKit Extension

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

yarGen is a generator for YARA rules

A modular Python application to pull intelligence about malicious files

FAME Automates Malware Evaluation

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

A Binary Genetic Traits Lexer Framework

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Malice Yara Plugin

Java-layer Android Malware Simplifier

Distributed malware processing framework based on Python, Redis and MinIO.

Community modules for FAME

Curated list of awesome cybersecurity companies and solutions.

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Malware hashes for open source projects.

🐺 Malware analysis platform

Personal compilation of APT malware from whitepaper releases, documents and own research

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

Defund the Police.

Modular file scanning/analysis framework

Malware repository component for samples & static configuration with REST API interface.

🐺 Malware analysis platform

A Python library and command line tools to provide interactive log visualization.

Malware similarity platform with modularity in mind.

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Golang malware development framework

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

A Linux Ransomware

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

Malware sample library.

A curated list of amazingly awesome Cybersecurity datasets

Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups

A comprehensive binary emulation and instrumentation platform.

Exploit Development and Reverse Engineering with GDB Made Easy

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

Various snippets created during malware analysis

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

Collection of malware source code for a variety of platforms in an array of different programming languages.