Search Results for "malware development"
Sort By:
Showing 21 open source projects for "malware development"
View related business solutions-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
1
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This... -
3
Capstone
Capstone disassembly/disassembler framework
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features. Support multiple hardware architectures: ARM, ARM64 (ARMv8), Ethereum VM, M68K, Mips, MOS65XX, PPC, Sparc, SystemZ, TMS320C64X, M680X, XCore and X86 (including X86_64). Having clean/simple/lightweight/intuitive... -
4
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
5
APIs For OSINT
List of API's for gathering information about phone numbers, addresses
APIs for OSINT is a curated directory of application programming interfaces useful for automating open-source intelligence research. It organizes services for phone numbers, addresses, businesses, domains, DNS, IP addresses, email, archives, social platforms, finance, cryptocurrencies, malware analysis, geolocation, and other investigative areas. Each entry typically links to documentation and summarizes what the service provides. Many listings also note whether access is free, freemium, or... -
6
LitterBox
A secure sandbox environment for malware developers and red teamers
...Repo metadata and author pages highlight an active security-tools ecosystem around the maintainer, with CI and pull-request activity suggesting ongoing development. The project positions itself as a safe proving ground to reduce surprises in the field while minimizing operational risk. For teams exploring MCP integrations, notes mention pairing with LLM agents for assisted analysis. -
7
Applite
User-friendly GUI macOS application for Homebrew Casks
Download, update and uninstall your Mac apps with a single click. Applite uses the Homebrew package manager under the hood. Homebrew is a free and open-source project that makes it easy to install developer tools and desktop applications on macOS. Any application that can be found in the Homebrew Catalog is available on Applite. Use the search function to find all applications in Applite. The macOS built-in protection (Gatekeeper and XProtect) will scan the application for potential malware... -
8
XPEViewer
PE file viewer/editor for Windows, Linux and MacOS
...Builds are available for Windows, Linux, and macOS despite the analyzed format being primarily associated with Windows. Its modular Qt-based codebase supports both continued development and specialized binary-analysis workflows. -
9
Windows MBox Viewer
Windows eml and mbox viewer.
...Gain access to mbox archives, single eml or single Outlook messages. View attachments and export single mails in eml format. Access large mbox files such as Google Takeout or Mozilla Thunderbird Archives. Development of mbox viewer continues now at github: https://github.com/eneam/mboxviewer **NOTE**: Windows Defender may sometimes report incorrectly that mbox-viewer contains malware. Please report the case to the development. Development will ask Windows Security to update Windows Defender rules to resolve the issue. Last time the incorrect detection was corrected by Microsoft Security within few hours. ... -
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
10
url-checker-php-sdk
Official PHP SDK for the EmailVeritas URL Checker API
The EmailVeritas URL Checker PHP SDK provides real-time phishing and malicious link detection through the official EmailVeritas API. It enables developers to classify and analyze URLs directly from PHP applications using simple methods for URL Lookup and URL Scan. Lightweight and dependency-free, the SDK performs redirect-chain, WHOIS, and HTML metadata analysis. Composer support makes integration seamless with PSR-4 autoloading. Ideal for CRMs, contact forms, and security... -
11
Volatility
An advanced memory forensics framework
Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins for detecting hidden processes, malware, rootkits, and event tracing. It’s essential in digital forensics and incident response workflows. -
12
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
13
VX-API
Collection of various malicious functionality
VX-API is a research-oriented collection of Windows-focused code that demonstrates low-level techniques commonly studied in malware analysis and red-team development. It is organized as a Visual Studio solution so related functions and dependencies can be explored together. The repository covers areas such as anti-debugging, cryptographic helpers, fingerprinting, process creation, process injection, networking, library loading, and string handling. It also includes examples involving shellcode execution, privilege-related behavior, and Windows internals. ... -
14
System Programming Roadmap
A roadmap to teach myself compiler dev, malware reverse engineering
system-programming-roadmap is a curated roadmap and resource guide designed to help learners navigate the complex world of system-level programming. It aggregates high-quality tutorials, books, project ideas, and documentation links related to topics such as operating systems, file systems, kernel development, networking, and compilers. This repository is ideal for beginners looking to structure their learning or for experienced developers seeking to expand their knowledge in a structured... -
15
Extreme Injector
DLL injector for gaming and other uses
Extreme Injector is a software tool commonly used to inject Dynamic Link Libraries (DLLs) into other processes running on a Windows system. Often used in gaming and software development, this tool allows users to modify or add custom functionality to a target application by "injecting" DLL files, which can influence the application's behavior or provide additional features. Extreme Injector is popular in the gaming community for enabling modifications or "mods" in games, but it also has potential misuse in game cheating and malware deployment, as it allows for altering applications in ways the original developers may not have intended. -
16
isis-development
a new compiler that mitigates malware coding practices
Hi, I would like to address the issue of malware in source development. In this project, I would like to ask for help in developing development system starting with a compiler that prevents and issues exceptions when malware coding is detected. The project name Isis is chosen from a Saturday morning TV series I watched about a woman scientist who solved issued by working together in hearts and minds. -
17
Dr0p1t-Framework
A framework that create an advanced stealthy dropper
Dr0p1t-Framework is a penetration testing tool designed to generate advanced and stealthy droppers capable of delivering and executing payloads on target systems while evading detection mechanisms. A dropper is a type of malware used to download and install additional malicious software, and this framework focuses on making that process more flexible and difficult to detect. It provides a wide range of modules that allow users to customize payload delivery, persistence mechanisms, and... -
18
Quazaa
A cross platform multi-network peer-to-peer (P2P) file-sharing client.
Quazaa is a cross platform multi-network peer-to-peer (P2P) file-sharing client inspired by Shareaza which will support Gnutella2, Ares, eDonkey2000 (eMule), HTTP, FTP, and BitTorrent. Using the Qt software development kit -
19
A simple, JavaFX-based movie database application *** Softpedia guarantees that MovieFX is 100% Clean, which means it does not contain any form of malware, including but not limited to: spyware, viruses, trojans and backdoors. *** Please report any bugs, or write your suggestions/requests to uurcnyldrm@hotmail.com
-
20
Access Road
Simulator of access controls
The Access Road software is a universal simulator of access controls that is intended to improve design and auditing of IT security. Access Road offers the out-of-the-box simulations of GNU/Linux Ubuntu® (components and rights on the file system), MySQL Server®, and a generic Role-Based-Access-Control application to adapt to your needs. It is designed for database, system, and application administrators, IT architects and developers, auditors. Access Road provides a full simulation of... -
21
IMPACT Global Response Center Development team LiveCD Malware Honeypot Sensor Project. The LIVECD contains IMPACT specially unique design malware sensor
- Previous
- You're on page 1
- Next
