Python Malware

Open-source Python projects categorized as Malware
Edit details
Python Security malware-analysis malware-research Cybersecurity
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

Top 23 Python Malware Projects

Python logo
Malware

  1. hosts

    🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

    Project mention: I made my phone slow on purpose | news.ycombinator.com | 2026-06-01

    For those who don't use it already, the following is a great compilation of curated block lists you can put into your etc/hosts file to block traffic :)

    https://github.com/StevenBlack/hosts

  2. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo

  3. wifiphisher

    The Rogue Access Point Framework

  4. theZoo

    A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

  5. maltrail

    Malicious traffic detection system

  6. pyWhat

    🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

  7. qiling

    A True Instrumentable Binary Emulation Framework

    Project mention: Unicorn – The Ultimate CPU Emulator | news.ycombinator.com | 2026-06-16

    I use Qiling [0] (built on top of Unicorn) sometimes for this kind of things (it can take application snapshots, that you can restore; and you can also use something similar to x86/x86-64 memory hardware breakpoints too). Might fit what you want, although it can sometimes be in a pain in the rear to set up...

    [0] https://github.com/qilingframework/qiling

  8. volatility3

    Volatility 3.0 development

    Project mention: Data Science Techniques That Speed Up Incident Response | dev.to | 2026-05-04

    These techniques are force multipliers, not substitutes for forensic tools. They don't replace Autopsy, Volatility, or Plaso. The pattern is: Plaso builds the timeline, pandas lets you filter and analyze it; Volatility extracts memory artifacts, Python processes what Volatility extracts.

  9. flare-floss

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

  10. malwoverview

    Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

  11. CAPEv2

    Malware Configuration And Payload Extraction

  12. APT_REPORT

    Interesting APT Report Collection And Some Special IOCs

  13. yarGen

    yarGen is a generator for YARA rules

  14. ThePhish

    ThePhish: an automated phishing email analysis tool

  15. drakvuf-sandbox

    DRAKVUF Sandbox - automated hypervisor-level malware analysis system

  16. intelmq

    IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

  17. opensquat

    The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

  18. packj

    Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

    Project mention: Packj flags malicious/risky open-source packages | news.ycombinator.com | 2026-05-22

  19. misp-galaxy

    Clusters and elements to attach to MISP events or attributes (like threat actors)

  20. Python-Rootkit

    Python Remote Administration Tool (RAT) to gain meterpreter session

  21. MalConfScan

    Volatility plugin for extracts configuration data of known malware

  22. gmailc2

    A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions

  23. Safe-and-Stable-Ckpt2Safetensors-Conversion-Tool-GUI

    Convert your Stable Diffusion checkpoints quickly and easily.

  24. debloat

    A GUI and CLI tool for removing bloat from executables

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python Malware discussion

Log in or Post with

Python Malware related posts

Index

What are some of the best open-source Malware projects in Python? This list will help you:

# Project Stars
1 hosts 30,724
2 wifiphisher 14,559
3 theZoo 13,205
4 maltrail 8,553
5 pyWhat 7,212
6 qiling 6,016
7 volatility3 4,255
8 flare-floss 4,093
9 malwoverview 3,948
10 CAPEv2 3,366
11 APT_REPORT 3,056
12 yarGen 1,802
13 ThePhish 1,334
14 drakvuf-sandbox 1,317
15 intelmq 1,121
16 opensquat 977
17 packj 688
18 misp-galaxy 637
19 Python-Rootkit 637
20 MalConfScan 497
21 gmailc2 487
22 Safe-and-Stable-Ckpt2Safetensors-Conversion-Tool-GUI 457
23 debloat 452

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
Loading...