Search Results for "malware development"
Sort By:
Showing 56 open source projects for "malware development"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
1
Ghidra
Ghidra is a software reverse engineering (SRE) framework
Ghidra is a free and open-source reverse engineering framework developed by the NSA for analyzing compiled software. It supports a wide array of instruction sets and executable formats, offering features such as decompilation, disassembly, scripting, and interactive graphing. Designed for security researchers and analysts, Ghidra provides a robust environment for understanding malware, auditing code, and performing software forensics. It includes both GUI-based and headless analysis modes. -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This... -
3
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
4
APIs For OSINT
List of API's for gathering information about phone numbers, addresses
APIs for OSINT is a curated directory of application programming interfaces useful for automating open-source intelligence research. It organizes services for phone numbers, addresses, businesses, domains, DNS, IP addresses, email, archives, social platforms, finance, cryptocurrencies, malware analysis, geolocation, and other investigative areas. Each entry typically links to documentation and summarizes what the service provides. Many listings also note whether access is free, freemium, or... -
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
5
Capstone
Capstone disassembly/disassembler framework
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features. Support multiple hardware architectures: ARM, ARM64 (ARMv8), Ethereum VM, M68K, Mips, MOS65XX, PPC, Sparc, SystemZ, TMS320C64X, M680X, XCore and X86 (including X86_64). Having clean/simple/lightweight/intuitive... -
6
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
7
LitterBox
A secure sandbox environment for malware developers and red teamers
...Repo metadata and author pages highlight an active security-tools ecosystem around the maintainer, with CI and pull-request activity suggesting ongoing development. The project positions itself as a safe proving ground to reduce surprises in the field while minimizing operational risk. For teams exploring MCP integrations, notes mention pairing with LLM agents for assisted analysis. -
8
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic... -
9
ImHex
A Hex Editor for Reverse Engineers, Programmers
ImHex is a free, open-source hex editor designed for reverse engineers, software developers, cybersecurity professionals, and digital forensics analysts. The software provides advanced tools for inspecting, editing, and analyzing binary files through a modern, customizable interface. ImHex features a powerful Pattern Language that allows users to define custom data structures, parse complex file formats, and visualize binary information. Its integrated disassembler, data inspector, entropy... -
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
10
Applite
User-friendly GUI macOS application for Homebrew Casks
Download, update and uninstall your Mac apps with a single click. Applite uses the Homebrew package manager under the hood. Homebrew is a free and open-source project that makes it easy to install developer tools and desktop applications on macOS. Any application that can be found in the Homebrew Catalog is available on Applite. Use the search function to find all applications in Applite. The macOS built-in protection (Gatekeeper and XProtect) will scan the application for potential malware... -
11
reverse-skill
Reverse Engineering and Authorized Penetration Testing
reverse-skill is a cybersecurity skill router for AI coding agents working on authorized reverse engineering, penetration testing, CTF, and security research tasks. It analyzes the target type and directs the agent to an appropriate methodology instead of relying on improvised commands. Its playbooks cover Android and iOS applications, native binaries, .NET, JavaScript, firmware, malware, APIs, supply chains, and other specialized scenarios. The package checks locally available tools and can... -
12
UACMe
Defeating Windows user account control
Run executable from command line, akagi32 [Key] [Param] or akagi64 [Key] [Param]. First parameter is a number of methods to use, second is an optional command (executable file name including full path) to run. The second parameter can be empty - in this case, the program will execute elevated cmd.exe from the system32 folder. Since 3.5.0 version all "fixed" methods are considered obsolete and removed altogether with all supporting code/units. If you still need them. This tool shows ONLY... -
13
BypassAntiVirus
The remote control no-kill series of articles and supporting tools
BypassAntiVirus is a security-research archive focused on studying how antivirus products detect remote-access payloads and related executable techniques. It contains a long series of articles documenting historical evasion approaches, tool comparisons, implementation experiments, and detection-rate testing. The material examines how changes in packaging, compilation, trusted system components, and execution techniques can affect antivirus visibility. Numerous security tools and research... -
14
FluxDisk
Free open-source USB and removable drive repair utility
FluxDisk is a free and open-source Windows utility designed to repair, recover and maintain removable storage devices. It can restore hidden files after malware infections, repair file and folder attributes, fix write protection issues and format USB flash drives, SD cards and external hard drives. FluxDisk is lightweight, easy to use and compatible with Windows XP, Windows Vista, Windows 7 and newer Windows versions. -
15
HydraDragonAntivirus
Open Source Antivirus/XDR for Windows operating system
Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine. -
16
Windows MBox Viewer
Windows eml and mbox viewer.
...Gain access to mbox archives, single eml or single Outlook messages. View attachments and export single mails in eml format. Access large mbox files such as Google Takeout or Mozilla Thunderbird Archives. Development of mbox viewer continues now at github: https://github.com/eneam/mboxviewer **NOTE**: Windows Defender may sometimes report incorrectly that mbox-viewer contains malware. Please report the case to the development. Development will ask Windows Security to update Windows Defender rules to resolve the issue. Last time the incorrect detection was corrected by Microsoft Security within few hours. ... -
17
url-checker-php-sdk
Official PHP SDK for the EmailVeritas URL Checker API
The EmailVeritas URL Checker PHP SDK provides real-time phishing and malicious link detection through the official EmailVeritas API. It enables developers to classify and analyze URLs directly from PHP applications using simple methods for URL Lookup and URL Scan. Lightweight and dependency-free, the SDK performs redirect-chain, WHOIS, and HTML metadata analysis. Composer support makes integration seamless with PSR-4 autoloading. Ideal for CRMs, contact forms, and security... -
18
mmmv_set_of_WinXP_SP3_x86_installers_t1
Yet another collection of WindowsXP ServicePack3 x86 binaries.
The binaries have been downloaded in 2023 summer and autumn from various places without checking the downloaded binaries for malware. There was an effort to download the binaries from original authors'/publishers' web sites, but if the original publishing web site could not be found or it lacked sufficiently old versions, then almost any random download site was used. -
19
XPEViewer
PE file viewer/editor for Windows, Linux and MacOS
...Builds are available for Windows, Linux, and macOS despite the analyzed format being primarily associated with Windows. Its modular Qt-based codebase supports both continued development and specialized binary-analysis workflows. -
20
Volatility
An advanced memory forensics framework
Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins for detecting hidden processes, malware, rootkits, and event tracing. It’s essential in digital forensics and incident response workflows. -
21
TraceMAC - Traceroute for MAC addresses
TraceMAC is a command-line Layer 2 traceroute for Cisco switches
TraceMAC is a Windows/Linux command-line tool that allows you to trace a specific MAC address thru Cisco switches. It works by connecting to a switch using SSH, SNMP, Telnet, HTTP or HTTPS and do some "show commands" and later process the output, this will happen recursively until it finds the switch where that MAC address (PC/Printer/Etc) is directly connected. Note: It works with Cisco switches only and you must have CDP enabled at least on trunks/links between switches! Is tested... -
22
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
23
VX-API
Collection of various malicious functionality
VX-API is a research-oriented collection of Windows-focused code that demonstrates low-level techniques commonly studied in malware analysis and red-team development. It is organized as a Visual Studio solution so related functions and dependencies can be explored together. The repository covers areas such as anti-debugging, cryptographic helpers, fingerprinting, process creation, process injection, networking, library loading, and string handling. It also includes examples involving shellcode execution, privilege-related behavior, and Windows internals. ... -
24
System Programming Roadmap
A roadmap to teach myself compiler dev, malware reverse engineering
system-programming-roadmap is a curated roadmap and resource guide designed to help learners navigate the complex world of system-level programming. It aggregates high-quality tutorials, books, project ideas, and documentation links related to topics such as operating systems, file systems, kernel development, networking, and compilers. This repository is ideal for beginners looking to structure their learning or for experienced developers seeking to expand their knowledge in a structured... -
25
Abdal Admin Finder
Find website admin page
Find website admin page for pentester
