Showing 75 open source projects for "malware"

View related business solutions
  • Demo Series - Small Business Backup By Veeam Icon
    Demo Series - Small Business Backup By Veeam

    Learn how to protect your Microsoft 365 data, with simple, actionable tips today.

    Watch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
    Watch Demo Series
  • Build Agents and Models on One Platform Icon
    Build Agents and Models on One Platform

    Everything you need to build production-ready agents and models. Access 200+ Google and third-party AI models and tools.

    Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
    Start Free
  • 1
    AUR Malware Check

    AUR Malware Check

    Detection tools for the June 2026 atomic-lockfile AUR supply-chain

    AUR Malware Check is a community repository for detecting exposure to the June 2026 atomic-lockfile supply-chain attack against the Arch User Repository. It collects scattered indicators, affected package lists, and detection scripts into one place for easier review and contribution. The project helps users compare installed AUR packages against known compromised package lists.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 2
    PySilon Malware

    PySilon Malware

    Advanced RAT written in Python language

    ...The repository’s own disclaimer frames the material as educational while placing responsibility on the user. It is best categorized as malware for defensive analysis, threat research, and understanding abuse patterns, not as a normal administration tool.
    Downloads: 3 This Week
    Last Update:
    See Project
  • 3
    Power Pwn

    Power Pwn

    Repurpose Microsoft-trusted executables, service accounts, etc.

    Repurpose Microsoft-trusted executables, service accounts and cloud services to power a malware operation. These materials are presented from an attacker’s perspective with the goal of raising awareness to the risks of underestimating the security impact of No Code/Low Code. No Code/Low Code is awesome.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 4
    SSH-MITM

    SSH-MITM

    Server for security audits supporting public key authentication

    ssh man-in-the-middle (ssh-mitm) server for security audits supporting publickey authentication, session hijacking and file manipulation. SSH-MITM is a man in the middle SSH Server for security audits and malware analysis. Password and publickey authentication are supported and SSH-MITM is able to detect, if a user is able to login with publickey authentication on the remote server. This allows SSH-MITM to accept the same key as the destination server. If publickey authentication is not possible, the authentication will fall back to password-authentication. ...
    Downloads: 3 This Week
    Last Update:
    See Project
  • Earn up to 16% annual interest with Nexo. Icon
    Earn up to 16% annual interest with Nexo.

    Access competitive interest rates on your digital assets.

    Generate interest, borrow against your crypto, and trade a range of cryptocurrencies — all in one platform. Geographic restrictions, eligibility, and terms apply.
    Get started with Nexo.
  • 5
    AndroidNativeEmu

    AndroidNativeEmu

    Allows you to partly emulate an Android native library

    ...Instead of emulating an entire operating system, it focuses specifically on the native layer, allowing for targeted testing and reverse engineering of shared libraries (.so files). This makes it particularly useful in security research, malware analysis, and debugging of Android applications. The framework provides tools for loading binaries, simulating system calls, and interacting with native functions in a controlled environment. By abstracting away the complexity of full device emulation, it allows faster iteration and more focused analysis of specific components. ...
    Downloads: 2 This Week
    Last Update:
    See Project
  • 6
    LitterBox

    LitterBox

    A secure sandbox environment for malware developers and red teamers

    LitterBox is a controlled malware-analysis and payload-testing sandbox aimed at red teams who need to validate evasions and behaviors before deployment. It provides an isolated environment to exercise payloads against modern detection stacks, verify signatures and heuristics, and observe runtime characteristics without leaking binaries to third-party vendors. The README frames typical use cases: testing evasion, validating detections, analyzing behavior, and keeping sensitive tooling in-house. ...
    Downloads: 1 This Week
    Last Update:
    See Project
  • 7
    IntelOwl

    IntelOwl

    Centralized platform for automated threat intelligence analysis

    ...These plugins can collect data from external intelligence platforms or generate insights using internal analysis tools such as YARA or static malware analyzers.
    Downloads: 0 This Week
    Last Update:
    See Project
  • 8
    Maltrail

    Maltrail

    Malicious traffic detection system

    Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware). Sensor(s) is a standalone component running on the monitoring node (e.g. Linux platform connected passively to the SPAN/mirroring port or transparently inline on a Linux bridge) or at the standalone machine (e.g. Honeypot) where it "monitors" the passing Traffic for blacklisted items/trails (i.e. domain names, URLs and/or IPs).
    Downloads: 12 This Week
    Last Update:
    See Project
  • 9
    Downloads: 0 This Week
    Last Update:
    See Project
  • MongoDB Atlas runs apps anywhere Icon
    MongoDB Atlas runs apps anywhere

    Deploy in 115+ regions with the modern database for every enterprise.

    MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
    Start Free
  • 10
    LSG - Linux SecureGuard

    LSG - Linux SecureGuard

    Professional antivirus solution developed for Linux systems.

    Professional antivirus solution developed for Linux systems. Protects your Linux servers and desktop systems with real-time protection, network security and advanced threat detection features.
    Downloads: 2 This Week
    Last Update:
    See Project
  • 11
    Morinus 9.6.3

    Morinus 9.6.3

    Updated Version From Morinus 8.1.0

    This program is open source, so it contains no viruses or malware. Occasionally, antivirus software or Microsoft Defender may flag and delete the installer, but this happens because I haven’t applied a paid code-signing certificate to the program and installer. It’s safe to use.
    Downloads: 136 This Week
    Last Update:
    See Project
  • 12
    Terminator - World's Fastest Autoclicker

    Terminator - World's Fastest Autoclicker

    Never be out-clicked again!

    SUBMIT SUGGESTIONS HERE: https://forms.gle/3SSozEcR1p3uy6dPA -------------------------------------------------------------------------------------------- Terminator - The World's Fastest Autoclicker. Made by gamers for gamers. Terminator is the end all be all of all autoclickers. With clicks reaching up to 1000+ CPS, you will never again be outclicked. Version 3.1: * Mouse buttons can now be used again to activate/deactivate the autoclicker Version 3.0: * Modern, clean...
    Leader badge
    Downloads: 796 This Week
    Last Update:
    See Project
  • 13
    HOTS Hosts Lite 1.1

    HOTS Hosts Lite 1.1

    Windows hosts editor with domain blocking, hosts lock & app firewall

    ...CORE: real-time table view, live search, bulk paste, auto-backup (rotating archive), diff preview, import/export .txt/.csv. DIAGNOSTICS: domain existence check, heuristic malware scanner (homoglyphs, punycode, typosquatting, suspicious TLDs). BLOCKING: custom domain blocklist, hosts file lock (ACL deny-write), application firewall blocking, 3 switchable hosts profiles. Also: 4 accent colors, 7 languages (EN/PL/FR/DE/ES/PT/RU), optional password protection, built-in update checker. Free, GPLv3. ...
    Downloads: 5 This Week
    Last Update:
    See Project
  • 14
    HydraDragonAntivirus

    HydraDragonAntivirus

    Open Source Antivirus/XDR for Windows operating system

    Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine.
    Downloads: 14 This Week
    Last Update:
    See Project
  • 15
    PyWarp CloudFlare Warp GUI

    PyWarp CloudFlare Warp GUI

    advanced GUI replacement for warp cloudflare warp

    Pywarp is a powerful replacement for the official Cloudflare WARP app, offering more advanced options in an intuitive and feature-rich user interface. With Pywarp, you can configure DNS modes, manage WARP protocols (masque and WireGuard), and set custom endpoints—all designed and all of the current offical app capabalaties to make WARP functionality accessible and convenient.
    Downloads: 14 This Week
    Last Update:
    See Project
  • 16
    Robolinux

    Robolinux

    Announcing Robolinux Cinnamon 14.1

    Announcing The New Robolinux Series 14 Mate LTS - 2034 Robolinux is very pleased to announce a completely new 14.1 Mate privacy centered 1inux operating system you can download freely while also offering our users an optional 14+ advanced upgrade which comes with our Untracker and FAAST Boot along with one click popular privacy software installers like Tor and I2p, Wireshark and Bleachbit plus many more for a fair and reasonable price. Robolinux14.1-Mate is ideal for beginners and...
    Downloads: 29 This Week
    Last Update:
    See Project
  • 17
    BT Auto Locker

    BT Auto Locker

    A Bluetooth-based proximity locking tool for Windows

    Welcome to BT Auto Locker! Begin using the application within seconds—no complex setup necessary. Simply download the portable version and benefit from immediate, automatic Bluetooth-based locking to safeguard your PC. BT Auto Locker is an intelligent utility for Windows that automatically locks your computer whenever a trusted Bluetooth device (such as your phone, headphones, or watch) moves beyond the specified range, ensuring your system remains secure. BT Auto Locker...
    Downloads: 3 This Week
    Last Update:
    See Project
  • 18
    Hercules_free_version

    Hercules_free_version

    Almacenamiento seguro offline para semillas BIP39 con cifrado avanzado

    ...A diferencia de métodos tradicionales como papel, notas digitales o almacenamiento en la nube, esta solución elimina la exposición a internet, reduciendo significativamente el riesgo de hackeos, malware o accesos no autorizados. El software utiliza cifrado avanzado para garantizar que tu información permanezca protegida en todo momento. Su funcionamiento es sencillo e intuitivo, pensado tanto para usuarios técnicos como para inversores que buscan máxima seguridad sin complicaciones. HERCULES no se conecta a la red, no accede a tus fondos y no requiere datos personales, lo que garantiza privacidad total. ...
    Downloads: 5 This Week
    Last Update:
    See Project
  • 19
    Warp VPN GUI

    Warp VPN GUI

    GUI para Warp VPN de Cloudflare

    Deja de usar la terminal para algo tan cotidiano como usar una VPN. Esta VPN, proveída por Cloudflare, es gratuita e incluye funciones como protección contra malware y contenido de escaso valor moral. Instalación Mediante Swiftinstall Descarga el paquete .deb Abre Swiftinstall y selecciona el paquete Pulsa en Instalar. Mediante dpkg Ejecuta dpkg -i warp-exec-v1.deb Requisitos Tener instalada Warp VPN -> https://pkg.cloudflareclient.com/#debian Haber activado Warp -> https://developers.cloudflare.com/warp-client/get-started/linux/
    Downloads: 1 This Week
    Last Update:
    See Project
  • 20
    malware-samples

    malware-samples

    A collection of malware samples and relevant dissection information

    This repo is a public collection of malware samples and related dissection/analysis information, maintained by InQuest. It gathers various kinds of malicious artifacts, executables, scripts, macros, obfuscated documents, etc., with metadata (e.g., VirusTotal reports), file carriers, and sample hashes. It’s intended for malware analysts/researchers to help study how malware works, how they are delivered, and how it evolves.
    Downloads: 194 This Week
    Last Update:
    See Project
  • 21
    Volatility

    Volatility

    An advanced memory forensics framework

    Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins for detecting hidden processes, malware, rootkits, and event tracing. It’s essential in digital forensics and incident response workflows.
    Downloads: 115 This Week
    Last Update:
    See Project
  • 22
    boundman

    boundman

    Add rule to windows firewall to block inbound and outbound traffic

    Boundman is an advanced, user-friendly, and sleek application designed to take control over your network connections. It allows you to efficiently manage and block incoming and outgoing traffic for specific .exe files contained within a chosen folder and its subfolders. With its intuitive PyQt5 graphical interface and robust PowerShell scripts, Boundman provides seamless integration with the Windows Firewall for a powerful network management experience.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 23
    EG ClamNet Antivirus

    EG ClamNet Antivirus

    A simple antivirus that provide a graphical interface for ClamAV

    ...EG ClamNet antivirus is simple and user friendly antivirus (currently for Windows OS ) that uses ClamAV as an internal scanning engine to detect trojans, viruses, malware and other known malicious threats. It can be installed on the existing default windows antivirus (Windows Defender) and compatible with it as extra protection. 1) Antivirus & Internet Security: EG ClamNet Antivirus is powered by ClamAV which has fast scanning, detects over 9 millions viruses, malware, worms and trozens. It also protects from MS Office macro viruses, mobile malware, other threats (including known ransomware). 2) Cleaner: EG ClamNet Antivirus has an additional feature of effective cleaning of junk files. ...
    Downloads: 7 This Week
    Last Update:
    See Project
  • 24
    Blank Grabber

    Blank Grabber

    The most powerful stealer written in Python 3

    ...It should not be used as a normal utility, administration tool, or learning project for general users. The safest way to describe it is as a malware sample for defensive analysis, detection engineering, and awareness of common stealer techniques. It is no longer actively maintained in the original repository.
    Downloads: 98 This Week
    Last Update:
    See Project
  • 25
    Discord ATIO

    Discord ATIO

    ATIO is a AIO Script Developed with Python3

    ...The repository itself describes the project as potentially malicious and unethical, and many of its modules involve activities that can violate privacy, platform rules, or the law. It includes tools related to selfbotting, account abuse, token misuse, webhook spam, server disruption, and remote-access malware. Because of that, it should not be treated as a normal Discord utility or legitimate bot framework. Its safest use case is defensive review, malware-awareness training, or historical analysis of common Discord abuse tooling. The project is best categorized as high-risk archived code rather than software for practical deployment.
    Downloads: 1 This Week
    Last Update:
    See Project
  • Previous
  • You're on page 1
  • 2
  • 3
  • Next