Alternatives and similar repositories for malware:

Users that are interested in malware are comparing it to the libraries listed below

• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 6 years ago
• matthewdunwoody / POSHSPY
  POSHSPY backdoor code
  ☆43Updated 7 years ago
• idiom / activemime-format
  ActiveMime File Format Documentation
  ☆17Updated 3 years ago
• 3gstudent / bitsadminexec
  Use bitsadmin to maintain persistence and bypass Autoruns
  ☆66Updated 7 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• edeca / rtfraptor
  Extract OLEv1 objects from RTF files by instrumenting Word
  ☆51Updated 5 years ago
• jacobsoo / ThreatHunting
  This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.
  ☆31Updated 5 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• MortenSchenk / Token-Stealing-Shellcode
  ☆51Updated 7 years ago
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 7 years ago
• mauronz / malware_analysis
  ☆15Updated 3 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 5 years ago
• eset / volatility-browserhooks
  Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
  ☆40Updated 6 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆39Updated 5 years ago
• REal0day / MaliciousPark
  Another Repo of Malware. Enjoy. <3
  ☆60Updated 5 years ago
• mrowensnobody / presentation
  ☆44Updated 6 years ago
• SecurityRiskAdvisors / PDBlaster
  ☆47Updated 5 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• CyberPoint / LEAP
  ☆23Updated 9 years ago
• eurecom-s3 / linux_screenshot_xwindows
  Volatility plugin to extract X screenshots from a memory dump
  ☆37Updated 6 years ago
• seth1002 / tracecorn_tina
  a modified version base on Tracecorn
  ☆20Updated 5 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• silascutler / IDA_AutoAnalysis
  IDA Pro plugin that rename functions on load, based on functionality
  ☆19Updated 6 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆26Updated 5 years ago
• v-p-b / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆36Updated 6 years ago
• abatchy17 / HEVD-Exploits
  Exploit code used for the HackSysExtremeVulnerableDriver.
  ☆43Updated 6 years ago
• raw-data / malarchive
  Malware samples observed in the wild from time to time
  ☆12Updated 5 years ago
• DeliciousHorse / writeups
  ☆21Updated 5 years ago