Alternatives and similar repositories for malware-writeups:

Users that are interested in malware-writeups are comparing it to the libraries listed below

• sysopfb / Malware_Scripts
  Various scripts for different malware families
  ☆106Updated 4 years ago
• NavyTitanium / Misc-Malwares
  Collection of various files from infected hosts
  ☆74Updated 3 years ago
• k-vitali / Malware-Misc-RE
  Miscellaneous Malware RE
  ☆195Updated 2 years ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago
• misterch0c / what_is_this_c2
  For all these times you're asking yourself "what is this panel again?"
  ☆255Updated last year
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆93Updated 4 years ago
• d00rt / emotet_research
  ☆134Updated 6 years ago
• albertzsigovits / malware-tools
  A curated list of malware repositories, trackers and malware analysis tools
  ☆84Updated 2 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• unixfreaxjp / malwaremustdie
  repository of tools & resources of the MMD team
  ☆131Updated 2 years ago
• wolfvan / some-samples
  Malware captured with honeypots
  ☆38Updated 7 years ago
• paranoidninja / Botnet-blogpost
  This repo basically contains the code that was mentioned in the blogposts that was written by me at:
  ☆95Updated 2 years ago
• josh0xA / threadfire
  PoC Thread Execution Hijacking for Win32 Code Injection
  ☆176Updated 8 months ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• intezer / MoP
  MoP - "Master of Puppets" - Advanced malware tracking framework
  ☆80Updated 7 months ago
• t3rabyt3-zz / Gozi
  Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years.
  ☆64Updated 7 years ago
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆176Updated 3 months ago
• NtRaiseHardError / Antimalware-Research
  Research on Anti-malware and other related security solutions
  ☆258Updated 4 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆137Updated 2 years ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆208Updated 3 years ago
• dalvarezperez / CreateFile_based_rootkit
  ☆134Updated last month
• yatt-ze / AbSent-Loader
  Example Loader to be used as a learning resource for people interested in how commercially available malware is made on a very basic leve…
  ☆71Updated 5 years ago
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆116Updated 2 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆380Updated 5 years ago
• pentesteracademy / linux-rootkits-red-blue-teams
  Linux Rootkits (4.x Kernel)
  ☆82Updated 3 years ago
• hasherezade / persistence_demos
  Demos of various (also non standard) persistence methods used by malware
  ☆221Updated 2 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆211Updated last month
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆261Updated 6 years ago
• ITAYC0HEN / SUNBURST-Cracked
  The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.
  ☆56Updated 4 years ago