346 Open source projects that are alternatives of or similar to vx

Malice Windows Defender AntiVirus Plugin

A ransomware developed in python, with bypass technics, for educational purposes.

RCEed version of computer malware / rootkit MyRTUs / Stuxnet.

Malware Behavior Analyzer

A simple polymorphic engine

Vxheaven.org website's mirror

Allows you to quickly query a Windows machine for RAM artifacts

Automatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage

Collection of various malicious functionality to aid in malware development

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

Qiling Advanced Binary Emulation Framework

Let's make an annoyance free, better open internet, altogether!

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

Cuckoo Sandbox plugin for extracts configuration data of known malware

Quickly and easily install, uninstall, and set up automatic updates for any of Steven Black's unified hosts files.

💻⚠️ A curated collection of awesome malware, botnets, and other post-exploitation tools.

Agile Sandbox for analyzing Windows, Linux and macOS malware and execution behaviors

An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.

Pythonic ransomware proof of concept.

A collection of scripts I've written to help red and blue teams with malware persistence techniques.

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Sandbox for automated Linux malware analysis.

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

Python telnet honeypot for catching botnet binaries

Various scripts for different malware families

Anteater - CI/CD Gate Check Framework

A powerful C keylogger for Windows.

Source codes of malwares, stress tests etc. for computer.

To block the malware domains of coin-hive systemwide.

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

🐛 Malware Sinkhole List in various formats

An open source script to perform malware static analysis on Portable Executable

APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )

DDoor - cross platform backdoor using dns txt records

Telegram Desktop Session Stealer

The Mirai malware modified for use on NCL/a virtual/simulated environment.

Malware Data Science Reading Diary / Notes

Rootkits | Backdoors | Sniffers | Virus | Ransomware | Steganography | Cryptography | Shellcodes | Webshells | Keylogger | Botnets | Worms | Other Network Tools

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

A simple auditing utility for macOS

Malware Classifier From Network Captures

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Bringing you the best of the worst files on the Internet.

Unprotect is a python tool for parsing PE malware and extract evasion techniques.

Executables created while writing "Introduction to Manual Backdooring".

Detect silent (unwanted) changes to files on your system

Automated Cyber Offense

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

APTnotes data

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Telegram RAT written in Python

Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.

Python network worm that spreads on the local network and gives the attacker control of these machines.

Packer/Protector for x86-64 ELF binaries on Linux

Hashes of infamous malware

Advanced Malware with multifeatures written in ASM/C/C++ , work on all windows versions ! (uncompleted)

A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

Runtime memory analysis framework to identify Android malware