Malware

hostsPython

A unified hosts file aggregator that blocks ads, malware, and other unwanted content by merging reputable sources.

wifiphisherPython

A rogue Access Point framework for conducting Wi-Fi security testing and phishing attacks during red team engagements.

theZooPython

A live malware repository providing encrypted samples and source code for educational malware analysis and research.

MaltrailPython

A malicious traffic detection system that monitors network traffic for blacklisted threats and suspicious activities using public feeds and heuristics.

al-khaserC++

A proof-of-concept malware application that implements common anti-analysis techniques to test security tools and sandbox environments.

Simplify Android deobfuscatorJava

A generic Android deobfuscator that uses virtual execution to simplify obfuscated code for human analysis.

Volatility 3Python

A memory forensics framework for extracting digital artifacts from volatile memory (RAM) samples across Windows, Linux, and macOS.

FLOSSPython

A static analysis tool that automatically extracts and deobfuscates strings from malware binaries.

PafishC

A testing tool that detects virtual machines and malware analysis environments using techniques observed in real malware.

CAPEv2Python

An advanced malware sandbox for automated configuration and payload extraction with dynamic unpacking and anti-evasion capabilities.

malice.ioGo

An open-source malware analysis framework that functions as a self-hosted alternative to VirusTotal.

APT Notes

A repository of publicly-available reports and blogs on APT (Advanced Persistent Threat) campaigns, activity, and software, organized by year.

Yara rules generatorPython

A Python tool that generates YARA rules for malware detection by filtering out strings and opcodes that appear in goodware.

Malware ArchiveHTML

A collection of real-world malware samples, analysis exercises, and training resources for cybersecurity education and research.