Top 23 Python malware-research Projects

malware-research

• Add a project

• theZoo

  65 11,386 2.5 Python

  A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

  Project mention: Cyber Scarecrow, making your computer look 'scary' to malware | news.ycombinator.com | 2024-06-18

• CodeRabbit

  coderabbit.ai featured

  CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

  

• pyWhat

  17 6,581 0.0 Python

  🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

  Project mention: pyWhat VS binwalk - a user suggested alternative | libhunt.com/r/pyWhat | 2024-07-19

• CAPEv2

  5 2,035 9.9 Python

  Malware Configuration And Payload Extraction

• yarGen

  1 1,559 4.2 Python

  yarGen is a generator for YARA rules

• drakvuf-sandbox

  2 1,072 8.8 Python

  DRAKVUF Sandbox - automated hypervisor-level malware analysis system

  

• malboxes

  1 1,030 1.8 Python

  Builds malware analysis Windows VMs so that you don't have to.

  

• ThreatIngestor

  1 834 7.6 Python

  Extract and aggregate threat intelligence.

  

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• iocextract

  1 513 4.7 Python

  Defanged Indicator of Compromise (IOC) Extractor.

  

• karton

  2 395 6.3 Python

  Distributed malware processing framework based on Python, Redis and S3.

  

• mwdb-core

  1 328 8.3 Python

  Malware repository component for samples & static configuration with REST API interface.

  

• Fake-Sandbox-Artifacts

  2 250 3.8 Python

  This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

  Project mention: Cyber Scarecrow, making your computer look 'scary' to malware | news.ycombinator.com | 2024-06-18

  I’m sure it’s closed source for the eventual plans to monetize it, but what’s the real difference to something like https://github.com/NavyTitanium/Fake-Sandbox-Artifacts and why can’t you at least name yourselves?

  Not many software promises to fend off attackers, asks for an email address before download, and creates a bunch of processes using a closed source dll the existence of which can easily be checked.

  Then again, not many malware targeting consumers at random check for security software. You are more likely to see a malware stop working if you fake the amount of ram and cpu and your network driver vendor than if you have CrowdStrike, etc. running.

• malware-ioc

  8 209 4.1 Python

  This repository contains indicators of compromise (IOCs) of our various investigations. (by prodaft)

  

• pyhidra

  2 187 4.9 Python

  Pyhidra is a Python library that provides direct access to the Ghidra API within a native CPython interpreter using jpype.

  

• pyc2bytecode

  1 133 0.0 Python

  A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

• peid

  1 130 5.0 Python

  Python implementation of the Packed Executable iDentifier (PEiD)

  

• teleRAT

  6 109 0.0 Python

  Telegram RAT written in Python

• Configuration_extractors

  1 54 6.5 Python

  Configuration Extractors for Malware

• docker-packing-box

  1 49 9.1 Python

  Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

  

• machofile

  1 48 6.7 Python

  machofile is a module to parse Mach-O binary files

• bintropy

  1 43 3.2 Python

  Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

  

• IDAPython

  1 28 6.1 Python

  IDA Python scripts

• pypackerdetect

  1 21 2.8 Python

  Packing detection tool for PE files

  

• ace-firefist

  1 19 5.3 Python

  Attack chain emulator. Write recipes for initial access easily

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Python malware-research related posts

• Cyber Scarecrow, making your computer look 'scary' to malware

  7 projects | news.ycombinator.com | 18 Jun 2024

• PTI-257 Group Indicators of Compromise (IOCs) - PTI-257 consists of former Wizard Spider actors who are publicly known for the various malware variants they use (Ryuk, Trickbot, and Conti, among others)

  1 project | /r/blueteamsec | 14 Sep 2023

• TheZoo a.k.a. Malware DB

  1 project | news.ycombinator.com | 18 Aug 2023

• Tools to demonstrate malware or ransomware infected PC

  1 project | /r/cybersecurity | 20 Jul 2023

• Worms for practice

  1 project | /r/hacking | 28 Jun 2023

• Python script which uses Ghidra doesn't recognize imports

  1 project | /r/ghidra | 11 Jun 2023

• Decryptor for PlutoCrypt Ransomware

  1 project | /r/blueteamsec | 26 May 2023
• A note from our sponsor - CodeRabbit
  coderabbit.ai | 10 Dec 2024

  Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR. Learn more →

Index

Sponsored

CodeRabbit: AI Code Reviews for Developers

Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

coderabbit.ai

Do not miss the trending Python projects with our weekly report!