Search Results for "malware"
Sort By:
75 projects for "malware" with 1 filter applied:
-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
1
MalwareSourceCode
Collection of malware source code for a variety of platforms
MalwareSourceCode is a large archival collection of malware-related source code gathered for research and historical reference. The repository organizes material by platform, programming language, malware family, and technical category. Its directories cover Android, Linux, macOS, legacy Windows, Win32, Java, JavaScript, PHP, Perl, Python, Ruby, and other environments. Collections include proof-of-concept samples, older malware families, analysis-related libraries, phishing pages, and web panels. ... -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. ... -
3
IntelOwl
Centralized platform for automated threat intelligence analysis
...These plugins can collect data from external intelligence platforms or generate insights using internal analysis tools such as YARA or static malware analyzers. -
4
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
5
TinyClaw
The original Tiny Claw as your personal autonomous AI companion
TinyClaw is an open-source autonomous AI companion framework designed to make personal AI agents simpler, cheaper to run, and more accessible to individual users. The project is built from scratch with a deliberately small native core and a modular plugin architecture that allows capabilities to expand without turning the system into a heavy monolith. Its philosophy centers on creating a persistent AI companion that behaves more like a helpful digital partner than a purely configurable... -
6
BypassAntiVirus
The remote control no-kill series of articles and supporting tools
...Results were historically compared against multiple antivirus engines to illustrate differences in detection behavior. Because the repository concerns defensive bypass techniques that can be misused, it is most appropriate for authorized red-team research, malware analysis, and defensive detection engineering. -
7
url-checker-php-sdk
Official PHP SDK for the EmailVeritas URL Checker API
The EmailVeritas URL Checker PHP SDK provides real-time phishing and malicious link detection through the official EmailVeritas API. It enables developers to classify and analyze URLs directly from PHP applications using simple methods for URL Lookup and URL Scan. Lightweight and dependency-free, the SDK performs redirect-chain, WHOIS, and HTML metadata analysis. Composer support makes integration seamless with PSR-4 autoloading. Ideal for CRMs, contact forms, and security... -
8
Robolinux
Announcing Robolinux Cinnamon 14.1
Announcing The New Robolinux Series 14 Mate LTS - 2034 Robolinux is very pleased to announce a completely new 14.1 Mate privacy centered 1inux operating system you can download freely while also offering our users an optional 14+ advanced upgrade which comes with our Untracker and FAAST Boot along with one click popular privacy software installers like Tor and I2p, Wireshark and Bleachbit plus many more for a fair and reasonable price. Robolinux14.1-Mate is ideal for beginners and... -
9
Two tools able to edit your ipfilter.dat . These tools are able to edit your ipfilter.dat in order to check for big ranges and to check adjacent ranges . From the creators of ipfilterX , Nexus23 Labs . - Updates in Progress -
-
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
malware-samples
A collection of malware samples and relevant dissection information
This repo is a public collection of malware samples and related dissection/analysis information, maintained by InQuest. It gathers various kinds of malicious artifacts, executables, scripts, macros, obfuscated documents, etc., with metadata (e.g., VirusTotal reports), file carriers, and sample hashes. It’s intended for malware analysts/researchers to help study how malware works, how they are delivered, and how it evolves. -
11
Volatility
An advanced memory forensics framework
Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins for detecting hidden processes, malware, rootkits, and event tracing. It’s essential in digital forensics and incident response workflows. -
12
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
13
VX-API
Collection of various malicious functionality
VX-API is a research-oriented collection of Windows-focused code that demonstrates low-level techniques commonly studied in malware analysis and red-team development. It is organized as a Visual Studio solution so related functions and dependencies can be explored together. The repository covers areas such as anti-debugging, cryptographic helpers, fingerprinting, process creation, process injection, networking, library loading, and string handling. It also includes examples involving shellcode execution, privilege-related behavior, and Windows internals. ... -
14
Guia de Cyber Security
Get started in the field of information security
...It collects study resources, tools, career references, roadmaps, courses, books, channels, podcasts, and certification links. The guide introduces cybersecurity as a field and highlights different career paths, such as application security, cloud security, forensics, cryptography, malware analysis, threat intelligence, and security engineering. It also includes hands-on areas such as exploitation, API security testing, penetration testing tools, hardware hacking, CTF platforms, Linux distributions, virtual machines, and bug bounty resources. Because many security resources are available in different languages, the repository also points users toward translation tools. ... -
15
Phex - P2P Gnutella filesharing program
A P2P filesharing client which connects to the Gnutella network.
Phex is a P2P filesharing client which connects to the Gnutella network. It is multi-plattform and malware-free. It offers advanced functionalities and integrates all common Gnutella extensions like multi-source downloads and advanced search features -
16
The clamav-unofficial-sigs script provides a simple way to download, test, and update third-party signature databases provided by Sanesecurity, SecuriteInfo, MalwarePatrol, OITC, etc. The package also contains cron, logrotate, and man files.
-
17
fre:ac - free audio converter
Audio converter and CD ripper for various formats
fre:ac is a free audio converter and CD ripper for various formats and encoders. It features MP3, MP4/M4A, WMA, Ogg Vorbis, FLAC, AAC, and Bonk format support, integrates freedb/CDDB, CDText and ID3v2 tagging and is available in several languages. -
18
pe_to_shellcode
Converts PE into a shellcode
...Its goal is to add a reflective loading stub after compilation, instead of requiring the developer to build the PE with reflective loading already integrated. This makes it useful for controlled security research, malware analysis labs, and educational work on PE loading behavior. Because the technique is closely related to in-memory execution, it should be handled only in authorized environments. -
19
AI-for-Security-Learning
AI-based security algorithms, and security data analysis
...The project compiles learning resources, examples, and experimental tools that demonstrate how machine learning techniques can be applied to security-related problems. Topics addressed in the repository include malware detection, anomaly detection, threat classification, and intrusion detection systems. The materials help learners understand how AI can analyze large volumes of security data to identify patterns that may indicate malicious activity. In addition to demonstrating defensive applications, the repository also explores adversarial machine learning concepts that highlight potential vulnerabilities in AI systems. ... -
20
PyExfil
A Python Package for Data Exfiltration
...In my eyes it’s still a messy PoC that needs a lot more work and testing to become stable. The purpose of PyExfil is to set as many exfiltrations, and now also communication, techniques that CAN be used by various threat actors/malware around to bypass various detection and mitigation tools and techniques. You can track changes at the official GitHub page. Putting it simply, it’s meant to be used as a testing tool rather than an actual Red Teaming tool. Although most techniques and methods should be easily ported and compiled to various operating systems, some stable some experimental, the transmission mechanism should be stable on all techniques. ... -
21
chords-malware-analyzer
Chords is binary file strings extractor, with many formats supported.
...Is able to extract strings from files just like strings, but it also supports windows wide string, base64 and hexadecimal strings (with decoding support) and automatic recognition of Indicators of Compromise (IOCs). It has been developed to support the malware analysis process, but is a general purpose tool. -
22
Whonix
Whonix is an Anonymous Operating System.
...Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP. Whonix consists of two parts: One solely runs Tor and acts as a gateway, which we call Whonix-Gateway. The other, which we call Whonix-Workstation, is on a completely isolated network. Only connections through Tor are possible. Whonix is produced independently of, and carries no guarantee from, The Tor Project. ... -
23
Dr0p1t-Framework
A framework that create an advanced stealthy dropper
Dr0p1t-Framework is a penetration testing tool designed to generate advanced and stealthy droppers capable of delivering and executing payloads on target systems while evading detection mechanisms. A dropper is a type of malware used to download and install additional malicious software, and this framework focuses on making that process more flexible and difficult to detect. It provides a wide range of modules that allow users to customize payload delivery, persistence mechanisms, and execution methods. The framework includes features such as antivirus evasion, privilege escalation, and system persistence, enabling it to maintain access on compromised systems. ... -
24
Covert Channels Evaluation Framework
Network steganography / covert channels evaluation tool
...CCHEF is designed for evaluating covert channels and not for (mis)using them for actual covert communication. CCHEF's sender or receiver are normal user space applications that are not disguised in any way and do not contain any malware-like code, e.g. they do not illegally acquire superuser privileges etc. -
25
Is your server running slowly? Clamav-sniffer could help - it scans for malware such as phishes and viruses and configures your firewall to block the cracker.
