Collection of malware source code for a variety of platforms in an array of different programming languages.
-
Updated
May 30, 2026 - Assembly
#
malware-research
Here are 1,013 public repositories matching this topic...
Defund the Police.
list awesome static-analysis chinese dynamic-analysis awesome-list malware-analysis chinese-translation malware-research threat-sharing threatintel malware-samples analysis-framework automated-analysis network-traffic threat-intelligence domain-analysis malware-collection drop-ice
-
Updated
Jun 7, 2024
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-
Updated
Jul 24, 2026 - Python
Program for determining types of files for Windows, Linux and MacOS.
debugger detect packer entropy scanner static-analysis reverse-engineering disassembler detector mach-o elf malware-analysis binary-analysis program-analysis macho malware-research pentest hacktoberfest unpacker hacktoberfest2023
-
Updated
Sep 2, 2026 - JavaScript
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
python security pcap malware hacking cybersecurity malware-analysis malware-research cyber hacktoberfest re tryhackme
-
Updated
Oct 31, 2023 - Python
Android virtual machine and deobfuscator
android java emulator optimization virtual-machine reverse-engineering malware deobfuscation malware-analyzer dalvik malware-analysis malware-research deobfuscator android-malware reverse-engineer-apk
-
Updated
Apr 30, 2022 - Java
A curated list of awesome YARA rules, tools, and people.
ioc awesome awesome-list threat-hunting malware-analysis malware-research yara yara-rules malware-detection yara-manager yara-signatures malware-rules yara-scanner awesome-yara
-
Updated
Jun 15, 2026
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
virtual-machine sandbox reverse-engineering malware malware-analysis malware-research malware-families analysis-environments rdtsc
-
Updated
Jun 21, 2024 - C
Malware Configuration And Payload Extraction
configs sandbox reverse-engineering malware malware-analysis malware-research debugging-tools cape unpacking
-
Updated
Sep 2, 2026 - Python
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android machine-learning obfuscation antivirus malware-analysis malware-research yara packers malware-detection rasp yara-forensics android-protect-apps android-protection appshielding
-
Updated
Jul 27, 2026 - YARA
Materials for Windows Malware Analysis training (volume 1)
-
Updated
Jul 1, 2024 - Assembly
Collection of various malicious functionality to aid in malware development
-
Updated
Feb 28, 2024 - C++
VirusTotal Wanna Be - Now with 100% more Hipster
docker golang elasticsearch cloud malware dfir cybersecurity infosec antivirus malware-analysis malware-research virustotal malice
-
Updated
Apr 3, 2023 - Go
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
mcp zig malware-analysis binary-analysis malware-research x64dbg ai-agents x64dbg-plugin claude malware-scanner xdbg ziglang zig-lang x64dbg-tools mcp-servers mcp-server claude-code ai-debugging x64dbg-mcp
-
Updated
Aug 27, 2026 - Zig
Curated resources for malware dev, reverse engineering, and defensive security research.
-
Updated
Apr 1, 2026
yarGen is a generator for YARA rules
-
Updated
Jan 10, 2026 - Python
A curated list of awesome resources related to executable packing
security list awesome malware cybersecurity awesome-list malware-analysis binary-analysis malware-research packers awesome-lists malware-packers executable-packing packing-detection
-
Updated
May 31, 2026
Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
statistics malware phishing domains stats malware-research validity phishing-attacks phishing-sites phishing-reports phishing-servers phishing-domains
-
Updated
Aug 23, 2026
A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.
windows reverse-engineering windows-10 cheatsheet syscalls malware-analysis malware-research windows-api systems-programming win32-api windows-internals windows-11
-
Updated
Oct 4, 2024
Research code & papers from members of vx-underground.
-
Updated
Dec 7, 2021 - C
Add this topic to your repo
To associate your repository with the malware-research topic, visit your repo's landing page and select "manage topics."