Malware Libraries

41 Components & Libraries

Sortby

Malware Libraries

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

You have three options to generate your own hosts file. You can use our container image, build your own image, or do it in your own environment. Option #1 is easiest if you have Linux with Docker ins…

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Version: v3.6 beta Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of pe…

The Rogue Access Point Framework

Wifiphisher is... ...powerful. Wifiphisher can run for hours inside a Raspberry Pi device executing all modern Wi-Fi association techniques (including "Evil Twin", "KARMA" and "Known Beacons"). ...fl…

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

or Or for our MacPorts fans: You come across a new piece of malware called WantToCry. You think back to Wannacry and remember it was stopped because a researcher found a kill-switch in the code. When…

Malicious traffic detection system

The following (black)lists (i.e. feeds) are being utilized: As of static entries, the trails for the following malicious entities (e.g. malware C&Cs or sinkholes) have been manually included (fro…

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex…

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Note: python-oletools is not related to OLETools published by BeCubed Software. This is a personal open-source project, developed on my spare time. Any contribution, suggestion, feedback or bug repor…

ThePhish: an automated phishing email analysis tool

The following diagram shows how ThePhish works at high-level: This example aims to demonstrate how a user can send an email to ThePhish for it to be analyzed and how an analyst can actually analyze t…

A VBA parser and emulation engine to analyze malicious macros.

ViperMonkey is a VBA Emulation engine written in Python, designed to analyze and deobfuscate malicious VBA Macros contained in Microsoft Office files (Word, Excel, PowerPoint, Publisher, etc). docker…

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

IntelMQ is frequently used for: It follows the following basic meta-guidelines:

fireELF - Fileless Linux Malware Framework

fireELF is a opensource fileless linux malware framework thats crossplatform and allows users to easily create and manage payloads. By default is comes with 'memfd_create' which is a new way to run l…

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

To test the Ransomware out on your machine, edit lines 49 and 140 in the ransomware.py file with your own absolute paths etc for testing purposes and so you can use the localRoot folder [ATTACKER] Ru…

Volatility plugin for extracts configuration data of known malware

MalConfScan can dump the following malware configuration data, decoded strings or DGA domains: MalConfScan has a function to list strings to which malicious code refers. Configuration data is usually…

Artifact analysis tools by JPCERT/CC Analysis Center

Artifact analysis tools by JPCERT/CC Analysis Center C2 Commands Emulation tools in go language that supports analysis of GobRAT malware Volatility plugin for detecting APT17 related malware and extr…

Python network worm that spreads on the local network and gives the attacker control of these machines.

Python network worm that spreads on the local network and gives the attacker control of these machines. This code is not finished and works more like a "worm template" for you to get inspiration at t…

Windows Remote Administration Tool via Telegram. Written in Python

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

Python Hacking Tools (PyHTools) (pht) is a collection of python written hacking tools consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jamm…

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

Three quick start options are available:

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python. It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remote c…

:india: :robot: It's easy to use android botnet work without port forwarding, vps and android studio

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python.It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remotecon…

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more)

apt-get install -y python3 python3-pip curl libfuzzy-dev yara libmagic-dev libjansson-dev libssl-dev libffi-dev tesseract-ocr libtesseract-dev libssl-dev swig p7zip-full radare2 dmg2img mongodb redis…

OUTDATED | Professional & efficient credential stealer written in python.

This tool is explicitly designed and provided exclusively for educational intentions. Its primary objective is to illuminate the vulnerabilities that files can be susceptible to, highlighting the nee…

Professional & efficient credential stealer written in python.

Machine Learning for Network Intrusion Detection & Misc Cyber Security Utilities

A Python library and command line tools to provide interactive log visualization.

A Python library and command line tools to provide log visualization. When you view these plots you will need JavaScript turned on. The plots are interactive and you can select borders around the pi…