Search Results for "linux malware detect"
Sort By:
Showing 1148 open source projects for "linux malware detect"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
1
Detect It Easy
Program for determining types of files for Windows, Linux and MacOS
Detect It Easy (DiE) is a tool for determining the type and internal features of binary and other file formats. It is widely used by malware analysts, digital forensics investigators, reverse engineers, and security researchers to quickly inspect unknown files and infer their type, architecture, compiler/packer used, and internal structure. -
2
Mobile Detect
Mobile_Detect is a lightweight PHP class for detecting mobile devices
Mobile-Detect is a lightweight PHP library that inspects the HTTP user agent string and HTTP headers to detect whether a request comes from a mobile, tablet, or desktop device. It includes a rich set of detection rules covering device brands, operating systems, and browser engines so developers can tailor responses (views, assets, or layouts) based on client form factor. Its API is simple: isMobile(), isTablet(), or deviceFamily() methods make branching logic intuitive. The library is used... -
3
Alibi Detect
Algorithms for outlier, adversarial and drift detection
Alibi Detect is an open source Python library focused on outlier, adversarial and drift detection. The package aims to cover both online and offline detectors for tabular data, text, images and time series. Both TensorFlow and PyTorch backends are supported for drift detection. -
4
Crawler Detect
CrawlerDetect is a PHP class for detecting bots/crawlers/spiders
Crawler Detect is a PHP library that detects bots, crawlers, and spiders by analyzing user-agent headers and comparing them against a constantly updated list of known crawlers. It's useful for analytics, rate-limiting, or displaying alternative content for automated tools. It is fast, lightweight, and easy to integrate into any PHP application. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
AUR Malware Check
Detection tools for the June 2026 atomic-lockfile AUR supply-chain
AUR Malware Check is a community repository for detecting exposure to the June 2026 atomic-lockfile supply-chain attack against the Arch User Repository. It collects scattered indicators, affected package lists, and detection scripts into one place for easier review and contribution. The project helps users compare installed AUR packages against known compromised package lists. It also includes checks for related package-manager cache artifacts and supports broader historical scans through... -
6
Zen Linux
Simple, free and efficient ad-blocker and privacy guard
Zen is an open-source system-wide ad-blocker and privacy guard for Windows, macOS, and Linux. It works by setting up a proxy that intercepts HTTP requests from all applications and blocks those serving ads, tracking scripts that monitor your behavior, malware, and other unwanted content. By operating at the system level, Zen can protect against threats that browser extensions cannot, such as trackers embedded in desktop applications and operating system components. -
7
Al-Khaser
Public malware techniques used in the wild: Virtual Machine, Emulation
al-khaser is an open-source proof-of-concept security tool that deliberately implements techniques commonly used by real-world malware to test and evaluate the effectiveness of antivirus and endpoint detection and response (EDR) systems. It’s written in C/C++ and designed to execute a wide range of anti-analysis, anti-debugging, anti-virtualization, timing-based evasion, and sandbox detection routines so security researchers and defenders can see how well their tools detect or ignore these behaviors. ... -
8
PySilon Malware
Advanced RAT written in Python language
PySilon is a Python-based remote access malware project controlled through Discord. The repository describes it as an advanced RAT with a GUI builder and many remote-control modules. Its capabilities include screen capture, process control, file access, system information collection, input monitoring, browser data extraction, and disruptive system actions. Because those functions can be used to compromise other people’s computers, this project is high-risk and should only be discussed or... -
9
YARA
The pattern matching swiss knife for malware researchers
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determines its logic. YARA is multi-platform, running on Windows, Linux and Mac OS X, and can be used through its command-line interface or from your own Python scripts with the yara-python extension. ... -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
MalwareSourceCode
Collection of malware source code for a variety of platforms
MalwareSourceCode is a large archival collection of malware-related source code gathered for research and historical reference. The repository organizes material by platform, programming language, malware family, and technical category. Its directories cover Android, Linux, macOS, legacy Windows, Win32, Java, JavaScript, PHP, Perl, Python, Ruby, and other environments. Collections include proof-of-concept samples, older malware families, analysis-related libraries, phishing pages, and web panels. ... -
11
Portmaster
Block Mass Surveillance
Portmaster is a free and open-source application firewall that does the heavy lifting for you. Restore privacy and take back control over all your computer's network activity. Discover everything that is happening on your computer. Expose every connection your applications make and detect evil ones. Finally, get the power to act accordingly. Protect your whole computer, not just your browser. Block all advertisements and trackers for every application. Easily add your own rules and block... -
12
ClamAV
Antivirus engine for detecting trojans, viruses and malware
ClamAV is an open-source antivirus engine developed by Cisco Talos that provides cross-platform malware detection for servers, desktops, and mail systems. Originally designed for Unix environments and email security, it has evolved into a flexible antimalware toolkit capable of identifying millions of viruses, worms, trojans, and other threats. The software includes a command-line scanner, an automatically updating signature database, and a scalable multi-threaded daemon that enables... -
13
SSH-MITM
Server for security audits supporting public key authentication
ssh man-in-the-middle (ssh-mitm) server for security audits supporting publickey authentication, session hijacking and file manipulation. SSH-MITM is a man in the middle SSH Server for security audits and malware analysis. Password and publickey authentication are supported and SSH-MITM is able to detect, if a user is able to login with publickey authentication on the remote server. This allows SSH-MITM to accept the same key as the destination server. If publickey authentication is not possible, the authentication will fall back to password-authentication. ... -
14
Motion Detect
use your webcam to detect motion
The program works with a webcam to detect a change in the picture, such as an object or a person moving, and capture frames in a folder, so it can be useful as a motion detection program, i.e. for security purposes. -
15
DIE-engine
GUI & console sources for Detect It Easy(DiE)
...Both graphical and command-line workflows are maintained so analysis can be performed interactively or incorporated into scripts. Build configurations cover Windows, Linux, and macOS along with several Linux package formats. The repository is useful both as part of Detect It Easy and as source material for developers studying binary-analysis tooling. -
16
LSG - Linux SecureGuard
Professional antivirus solution developed for Linux systems.
Professional antivirus solution developed for Linux systems. Protects your Linux servers and desktop systems with real-time protection, network security and advanced threat detection features. -
17
PE-bear
Portable Executable reversing tool with a friendly GUI
PE-bear is a multiplatform reversing tool for inspecting Windows Portable Executable files. It is designed to give malware analysts and reverse engineers a fast first view of a PE file’s structure. The tool can handle malformed PE files, which is important when analyzing packed, damaged, or intentionally manipulated binaries. It provides a graphical interface for exploring headers, sections, imports, resources, strings, and other PE internals. PE-bear also includes analysis conveniences such... -
18
Elkeid
Open source solution that can meet the requirements of workloads
Elkeid is an open-source platform for security and intrusion-detection that aims to support a wide variety of deployment contexts — from bare-metal hosts to containers, Kubernetes clusters, and even serverless environments. It was born out of ByteDance’s internal security best practices, offering for community users a subset of its enterprise-grade capabilities. Elkeid combines kernel-level data collection, user-space agents, and runtime instrumentation (RASP) to detect malicious behavior,... -
19
Kudu
Free Windows, Mac and Linux cleaner, scanner, and more
Kudu is a free, open source system maintenance and security application for Windows, macOS, and Linux. It removes temporary files, logs, browser caches, abandoned application data, and other unnecessary content to recover disk space. Its security tools include malware scanning, heuristic analysis, secure file deletion, and controls for Windows privacy settings. Users can analyze disk usage, manage startup programs, uninstall software, remove bloatware, clean stale drivers, and update multiple applications in bulk. ... -
20
Ghidra
Ghidra is a software reverse engineering (SRE) framework
Ghidra is a free and open-source reverse engineering framework developed by the NSA for analyzing compiled software. It supports a wide array of instruction sets and executable formats, offering features such as decompilation, disassembly, scripting, and interactive graphing. Designed for security researchers and analysts, Ghidra provides a robust environment for understanding malware, auditing code, and performing software forensics. It includes both GUI-based and headless analysis modes. -
21
RetroBIOS
Complete BIOS & firmware packs for RetroArch, Batocera, Recalbox, etc.
RetroBIOS is an open-source project that provides complete BIOS and firmware packs for a wide range of emulators and retro gaming platforms. It includes thousands of verified system files required to run consoles and arcade systems accurately across tools like RetroArch, Batocera, RetroPie, and EmuDeck. Each BIOS file is validated against emulator source code to ensure correctness, compatibility, and proper functionality. The project simplifies setup by offering automated install scripts... -
22
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
23
Terrascan
Detect compliance and security violations across Infrastructure
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. As you embrace Infrastructure as Code (IaC) such as Terraform, Kubernetes, Argo CD, Atlantis and AWS CloudFormation, it is important to ensure that security best practices and compliance requirements are observed. Terracan provides 500+ out-of-the-box policies so that you can scan IaC against common policy standards such as the CIS Benchmark. It leverages... -
24
Power Pwn
Repurpose Microsoft-trusted executables, service accounts, etc.
Repurpose Microsoft-trusted executables, service accounts and cloud services to power a malware operation. These materials are presented from an attacker’s perspective with the goal of raising awareness to the risks of underestimating the security impact of No Code/Low Code. No Code/Low Code is awesome. -
25
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This...
