#malware-research (30 Repositories)
Ranked open-source repositories tagged with #malware-research, scored by pull request acceptance likelihood and maintainer engagement velocity.
9.7%
33.3h
30 repositories tagged #malware-research
kevoreilly/CAPEv2
Malware Configuration And Payload Extraction
duty1g/x64dbg-mcp-server
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
pedramamini/ThreatIngestor
Extract and aggregate threat intelligence.
H4NM/WhoYouCalling
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
JameZUK/Arkana
Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP
CERT-Polska/karton
Distributed malware processing framework based on Python, Redis and S3.
certsocietegenerale/fame
FAME Automates Malware Evaluation
swwwolf/wdbgark
WinDBG Anti-RootKit Extension
ThreatLabz/ransomware_notes
An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz
vxunderground/VX-API
Collection of various malicious functionality to aid in malware development
f1zm0/acheron
indirect syscalls for AV/EDR evasion in Go assembly
vxunderground/MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
redcode-labs/Coldfire
Golang malware development library
f0wl/MalwareLab_VM-Setup
Setup scripts for my Malware Analysis VMs
botherder/androidqf
androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.
zero2504/EDR-GhostLocker
AppLocker-Based EDR Neutralization
DesktopECHO/T95-H616-Malware
"Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes
SitinCloud/Owlyshield
Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).
ZeroMemoryEx/APT38-0day-Stealer
APT38 Tactic PoC for Stealing 0days from security researchers
pandare9x/Yara-Rules
Repository of Yara Rules
MalwareSamples/Malware-Feed
Bringing you the best of the worst files on the Internet.
cocomelonc/meow
Cybersecurity research results. Simple C/C++ and Python implementations
MarioVilas/winappdbg
WinAppDbg Debugger
CX330Blake/Black-Hat-Zig
This project provides some code examples of Zig for malwares, hacking, and red teaming. ⚡
0xDanielLopez/TweetFeed
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.
mthcht/ThreatIntel-Reports
Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports
horsicq/Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
InQuest/ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
horsicq/XAPKDetector
APK/DEX detector for Windows, Linux and MacOS.
hasherezade/malware_training_vol1
Materials for Windows Malware Analysis training (volume 1)