malware

Reverse Engineering and Malware Analysis Roadmap

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

:key: (THIS CODE IS OUTDATED FOR NEW CHROME VERSIONS) Decrypt chromium based browsers passwords, cookies, credit cards, history, bookmarks, autofill. Version > 80 is supported.

Cheat sheets for hacking techniques.

A free utility that finds malware, adware and other security threats

A collection of OSX and iOS security resources

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.

A Linux Ransomware

Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking.

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

⚠️ malware development

framework to rapidly implement custom droppers for all three major operating systems

Collection of knowledge about information security

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Some results of my DGA reversing efforts

A Collection of Cute But Deadly Viruses

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

A tool for studying JavaScript malware.

Collection of ancient computer virus source codes

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.

Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

Python Remote Administration Tool (RAT) to gain meterpreter session

Clusters and elements to attach to MISP events or attributes (like threat actors)

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

A large repository of malware samples with 2500+ malware samples & source codes for a variety of platforms by Cryptware Apps.

Data-Shield IPv4 Blocklist Community provides an official, curated registry of IPv4 addresses identified as malicious. Updated continuously, this resource offers vital threat intelligence to bolster your Firewall and WAF instances,...

Scans PHP files for malwares and known threats