Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with malware-detection

A curated list of projects in awesome lists tagged with malware-detection .

https://github.com/vxunderground/malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

malware malware-detection malware-development malware-research

Last synced: 14 May 2025

https://github.com/vxunderground/MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

malware malware-detection malware-development malware-research

Last synced: 18 Mar 2025

https://github.com/rednaga/apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research obfuscation packers rasp yara yara-forensics

Last synced: 13 May 2025

https://github.com/hasherezade/hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

anti-malware malware-analysis malware-detection memory-forensics pe-sieve

Last synced: 14 May 2025

https://github.com/rednaga/APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research packers rasp yara yara-forensics

Last synced: 12 Jul 2025

https://github.com/last-byte/persistencesniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

incident-response malware-detection persistence powershell powershell-module powershell-script registry techniques windows

Last synced: 14 May 2025

https://github.com/last-byte/PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

incident-response malware-detection persistence powershell powershell-module powershell-script registry techniques windows

Last synced: 10 Apr 2025

https://github.com/airbnb/binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

aws lambda malware-detection security serverless terraform yara

Last synced: 15 May 2025

https://github.com/eliasgranderubio/dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

detecting-anomalous-activities docker malware-detection security static-analysis vulnerabilities

Last synced: 08 Apr 2025

https://github.com/jpcertcc/emocheck

Emotet detection tool for Windows OS

emotet malware-detection security

Last synced: 04 Apr 2025

https://github.com/chenerlich/FCL

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

command-line fcl file-less incident-response malware malware-analysis malware-detection threat-hunting

Last synced: 30 Mar 2025

https://github.com/mxmssh/drltrace

Drltrace is a library calls tracer for Windows and Linux applications.

api-trace dbi malware-analysis malware-detection reverse-engineering

Last synced: 02 Apr 2025

https://github.com/sapphirex00/Threat-Hunting

Personal compilation of APT malware from whitepaper releases, documents and own research

collection malware malware-analysis malware-detection malware-research threat-hunting threat-intelligence threat-modeling threat-sharing yara-rules

Last synced: 31 Mar 2025

https://github.com/prodaft/malware-ioc

This repository contains indicators of compromise (IOCs) of our various investigations.

apt cybersecurity ioc malware malware-detection malware-research ransomware threat-hunting threat-intelligence threatintel threatintelligence ttp

Last synced: 10 Apr 2025

https://github.com/jpcertcc/yama

Yet Another Memory Analyzer for malware detection

anti-malware malware-detection memory-scanning yara yara-scanner

Last synced: 09 Apr 2025

https://github.com/Karneades/malware-persistence

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

malware malware-analysis malware-detection malware-persistence persistence threat-hunting threat-intelligence

Last synced: 24 Mar 2025

https://github.com/we5ter/flerken

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

blueteam de-obfuscates-bash malware-detection obfuscation-detection

Last synced: 01 Nov 2025

https://github.com/We5ter/Flerken

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

blueteam de-obfuscates-bash malware-detection obfuscation-detection

Last synced: 11 Jul 2025

https://github.com/carlospolop/MalwareWorld

System based on +500 blacklists and 5 external intelligences to detect internet potencially malicious hosts

blacklists malware-detection malwareworld proxies spam-detection tor

Last synced: 13 May 2025

https://github.com/carlospolop/malwareworld

System based on +500 blacklists and 5 external intelligences to detect internet potencially malicious hosts

blacklists malware-detection malwareworld proxies spam-detection tor

Last synced: 04 Jan 2026

https://github.com/oracle/macaron

Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:

build-system cicd docker gradle integrity-protection malware-analysis malware-detection maven npm python sbom slsa supply-chain-security

Last synced: 04 Apr 2025

https://github.com/MFMokbel/Crawlector

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

malware-detection threat-detection threat-hunting

Last synced: 11 Jul 2025

https://github.com/csvl/SEMA

SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.

angr binary-analysis classification concolic-execution ctf cybersecurity detection linux malware malware-analysis malware-detection malware-research python reverse reverse-engineering sema static-analysis symbolic symbolic-execution windows

Last synced: 27 Sep 2025

https://github.com/Hestat/lw-yara

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

dfir lw-yara malware-detection signature yara-rules

Last synced: 05 May 2025

https://github.com/neo23x0/yaraqa

YARA rule analyzer to improve rule quality and performance

detection malware-detection malware-research signatures yara

Last synced: 06 Apr 2025

https://github.com/0x48piraj/incarcero

Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis without any user interaction.

malware malware-analysis malware-detection malware-research malware-samples research security

Last synced: 25 Aug 2025

https://github.com/jaketae/deep-malware-detection

A neural approach to malware detection in portable executables

deep-learning malware-detection malware-research pe-file pe-format pytorch

Last synced: 12 Jun 2025

https://github.com/nikolamilosevic86/owasp-seraphimdroid

OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.

android-application defender machine-learning malware-detection malware-research owasp privacy security

Last synced: 12 Oct 2025

https://github.com/Hestat/blazescan

Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.

bash cpanel-servers dfir incident-response malware-detection scanning yara-integrated

Last synced: 11 Apr 2025

https://github.com/paulveillard/cybersecurity-threat-detection

An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Detection & Hunting.

cybersecurity encryption-decryption malware-analysis malware-detection malware-development security-tools security-vulnerability threat-analysis threat-blocker threat-detection threat-detection-policy threat-explorer threat-hunting threat-intelligence threat-modeling threat-monitor threat-response

Last synced: 14 Oct 2025

https://github.com/eset/volatility-browserhooks

Volatility Framework plugin to detect various types of hooks as performed by banking Trojans

malware-detection volatility volatility-framework volatility-plugins

Last synced: 10 Jul 2025

https://github.com/Mayachitra-Inc/MaleX

A curated dataset of malware and benign Windows executable samples for malware researchers

deep-learning image-classification machine-learning malware-detection malware-research

Last synced: 08 May 2025

https://github.com/gdatasoftwareag/vaas

Verdict-as-a-Service SDKs: Analyze files for malicious content

it-security malware malware-analysis malware-detection security

Last synced: 05 Jan 2026

https://github.com/palahsu/malware-smog

There are many powerful viruses 💀 that can damage your PC in a matter of seconds. Batch file virus to gain full access to another computer. This repo is a collection of fun little viruses that pack a mean punch!

batch-file batch-script batchfile batchfiles computer malware malware-analysis malware-detection malware-research pc trojan virus viruses virustotal

Last synced: 11 Jun 2025

https://github.com/GDATASoftwareAG/vaas

Verdict-as-a-Service SDKs: Analyze files for malicious content

antivirus g-data it-security malware malware-analysis malware-detection security

Last synced: 12 Jul 2025

https://github.com/secana/penet-analyzer

Analyzers for Portable Executable anomalies and other malware behavior.

malware malware-analysis malware-detection penet portable-executable

Last synced: 06 Jan 2026

https://github.com/abhinavbom/clara

Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets

clamav malware-analysis malware-analyzer malware-detection s3-bucket s3-storage yara yara-scanner

Last synced: 05 May 2025

https://github.com/bliutech/nlp-pdf-malware-detection

ECE 188: Computer Security. Repository for "NLP-based Malware Detection on PDFs". Utilizing NLP techniques & transformer models to perform malware detection in PDFs.

bert cybersecurity malware-detection nlp transformers

Last synced: 12 Apr 2025

https://github.com/tiredofit/docker-clamav

Docker antivirus software with monitoring and customizable features

alpine antivirus clamav docker malware-detection zabbix-agent

Last synced: 05 Apr 2025

https://github.com/undo-ransomware/ransomware_detection

:arrows_counterclockwise: Ransomware recovery app for Nextcloud

malware-detection nextcloud nextcloud-app ransomware ransomware-detection ransomware-recovery

Last synced: 01 Aug 2025

https://github.com/ojroques/tls-malware-detection

The report of a supervised classifier to detect malware in TLS traffic

classifier malware-detection msc-project msc-thesis tls

Last synced: 06 Mar 2025

https://github.com/mylamour/oops-webshell

Oops, It's funny to detect a webshell. Temporarily not maintained

malware-detection ssdeep tensorflow-examples webshell yara-integrated

Last synced: 10 Apr 2025

https://github.com/linuxthor/rkspotter

Rootkit spotter - experimental Linux rootkit finder LKM

linux-kernel linux-kernel-module malware malware-detection rootkit rootkit-hunter

Last synced: 05 Oct 2025

https://github.com/elastic/siglearn

Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"

machinelearning malware-detection security-tools yara yara-rules

Last synced: 19 Oct 2025

https://github.com/aigptcode/analysis-tcp-udp

This project implements a cybersecurity system for detecting anomalies and intrusions in network traffic. It utilizes machine learning models, network monitoring tools, and intrusion detection systems to monitor and respond to security threats in real-time.

malware malware-analysis malware-detection python python3 ransomeware-python ransomware tcp udp

Last synced: 06 Oct 2025

https://github.com/cyb3rmx/badpig

A compilation of snort rules for detecting malware traffic.

intrusion-detection malware-detection network-security security snort snort-rules

Last synced: 02 Jan 2026

https://github.com/shreyansh26/elf-miner

An implementation of the paper "ELF-Miner: Using Structural Knowledge and Data Mining Methods To Detect New (Linux) Malicious Executables"

data-mining elf elf-miner feature-extraction linux-malware machine-learning malware-analysis malware-detection static-analysis

Last synced: 10 Apr 2025

https://github.com/alex-snd/malwareclassifier

👾 Malware Classification using Deep Learning and Cuckoo Sandbox

cuckoo-sandbox cvae data-science deep-learning malware malware-classification malware-detection python pytorch vae

Last synced: 25 Apr 2025

https://github.com/alegrey91/go-upx

Go command-line wrapper library for upx utility

binding bindings golang golang-library golang-module malware-detection packer security-tools upx

Last synced: 12 Apr 2025

https://github.com/vchrombie/cap-america

Malicious Content Detection :shield: using ML.

machine-learning malware-detection web-security

Last synced: 04 Sep 2025

https://github.com/yueyuel/xaiforandroidmalware

Explainable AI for Android Malware Detection: Towards Understanding Why the Models Perform So Well?

android-app explainable-ai malware-detection reliability

Last synced: 29 Apr 2025

https://github.com/shreyansh26/ELF-Miner

An implementation of the paper "ELF-Miner: Using Structural Knowledge and Data Mining Methods To Detect New (Linux) Malicious Executables"

data-mining elf elf-miner feature-extraction linux-malware machine-learning malware-analysis malware-detection static-analysis

Last synced: 01 May 2025

https://github.com/linuxthor/rkbreaker

Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes

anti-rootkit malware-detection malware-research rootkit rootkit-hunter rootkits

Last synced: 16 Apr 2025

https://github.com/mytechnotalent/MalwareBazaar_MCP

An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.

agentic agentic-ai agentic-workflow ai malware malware-analysis malware-detection malware-research malware-samples mcp mcp-client mcp-server mcp-tools reverse-engineering

Last synced: 17 Jun 2025

https://github.com/mytechnotalent/malwarebazaar_mcp

An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.

agentic agentic-ai agentic-workflow ai malware malware-analysis malware-detection malware-research malware-samples mcp mcp-client mcp-server mcp-tools reverse-engineering

Last synced: 21 Jun 2025

https://github.com/shreyansh26/opcodes-for-malware-detection

Implementation of the paper "Opcodes as predictor for malware " by Daniel Bilar

elf hacktoberfest malware malware-detection opcodes

Last synced: 06 Jul 2025

https://github.com/shreyansh26/linux-malware-detection-research

A collection of Linux Malware Detection projects (research paper implementations) done by me.

data-mining elf linux-malware malware-analysis malware-detection weka

Last synced: 10 Apr 2025

https://github.com/talsec/freemalwaredetection-capacitor

Boost your Android app security with Free Malware Detection—an easy-to-integrate SDK that scans for malicious or suspicious apps in the background. Leveraging package and permission blacklists plus installation source policies, it delivers actionable malware protection against evolving threats.

android app-shielding application-security appsec attack-detection fraud-detection malware malware-detection malware-protection security-tools

Last synced: 02 Sep 2025