malware-research

Collection of malware source code for a variety of platforms in an array of different programming languages.

Defund the Police.

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Program for determining types of files for Windows, Linux and MacOS.

A curated list of awesome YARA rules, tools, and people.

Malware Configuration And Payload Extraction

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Materials for Windows Malware Analysis training (volume 1)

Collection of various malicious functionality to aid in malware development

x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros

Curated resources for malware dev, reverse engineering, and defensive security research.

yarGen is a generator for YARA rules

A curated list of awesome resources related to executable packing

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

Now You See Me, Now You Don't

Golang malware development library

FAME Automates Malware Evaluation

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

Extract and aggregate threat intelligence.

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

Reverse Engineering and Malware Analysis Roadmap

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

The PE file analysis toolkit

Collection of almost 40.000 javascript malware samples

⚠️ malware development

APK/DEX detector for Windows, Linux and MacOS.

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.

A large repository of malware samples with 2500+ malware samples & source codes for a variety of platforms by Cryptware Apps.