Alternatives and similar repositories for malware-writeups:

Users that are interested in malware-writeups are comparing it to the libraries listed below

• k-vitali / Malware-Misc-RE
  Miscellaneous Malware RE
  ☆195Updated 2 years ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago
• NavyTitanium / Misc-Malwares
  Collection of various files from infected hosts
  ☆73Updated 3 years ago
• sysopfb / Malware_Scripts
  Various scripts for different malware families
  ☆105Updated 3 years ago
• intezer / MoP
  MoP - "Master of Puppets" - Advanced malware tracking framework
  ☆82Updated 6 months ago
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆92Updated 4 years ago
• josh0xA / threadfire
  PoC Thread Execution Hijacking for Win32 Code Injection
  ☆175Updated 7 months ago
• unixfreaxjp / malwaremustdie
  repository of tools & resources of the MMD team
  ☆131Updated 2 years ago
• misterch0c / what_is_this_c2
  For all these times you're asking yourself "what is this panel again?"
  ☆254Updated last year
• compilepeace / KAAL_BHAIRAV
  -x-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x-x- An ELF virus capable of generating segment padded trojans.
  ☆43Updated 3 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆132Updated 2 years ago
• albertzsigovits / malware-tools
  A curated list of malware repositories, trackers and malware analysis tools
  ☆84Updated 2 years ago
• yatt-ze / AbSent-Loader
  Example Loader to be used as a learning resource for people interested in how commercially available malware is made on a very basic leve…
  ☆71Updated 5 years ago
• d00rt / emotet_research
  ☆134Updated 6 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆259Updated 6 years ago
• hasherezade / persistence_demos
  Demos of various (also non standard) persistence methods used by malware
  ☆221Updated 2 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆177Updated 2 months ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• MohitDabas / malwinx
  Just a normal flask web app to understand win32api with code snippets and references.
  ☆72Updated 5 years ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• WithSecureLabs / snake
  snake - a malware storage zoo
  ☆218Updated last year
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆207Updated 3 years ago
• misterch0c / APT34
  APT34/OILRIG leak
  ☆231Updated 5 years ago
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆114Updated last year
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆449Updated 2 years ago
• pentesteracademy / linux-rootkits-red-blue-teams
  Linux Rootkits (4.x Kernel)
  ☆82Updated 3 years ago
• CheckPointSW / Evasions
  Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into ca…
  ☆397Updated 8 months ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆68Updated 5 years ago
• woj-ciech / Daily-dose-of-malware
  Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cyb…
  ☆37Updated 5 years ago