Collection of malware source code for a variety of platforms in an array of different programming languages.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

A curated list of awesome YARA rules, tools, and people.

Android Reverse-Engineering Workbench for VS Code

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

No description provided.

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

ReversingLabs YARA Rules

Final year projects are a crucial part of a student's academic journey, particularly in the fields of engineering, computer science, and other technical disciplines.50 Final year Projects Includes Source Code, PPT, Synopsis, Report, Documents, Base Research Paper & Video tutorials

APK/DEX detector for Windows, Linux and MacOS.

Emotet detection tool for Windows OS

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.

Malware Sample Sources

Reverse Engineering and Malware Analysis Roadmap

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

AssemblyLine 4: File triage and malware analysis

Drltrace is a library calls tracer for Windows and Linux applications.

An open source framework for enterprise level automated analysis.

Awesome graph anomaly detection techniques built based on deep learning frameworks. Collections of commonly used datasets, papers as well as implementations are listed in this github repository. We also invite researchers interested in anomaly detection, graph representation learning, and graph anomaly detection to join this project as contributors and boost further research in this area.

Collection of private Yara rules.

Bringing you the best of the worst files on the Internet.

This repository contains indicators of compromise (IOCs) of our various investigations.

Anti-Malware for minecraft

Anti-malware for Android using machine learning