awesome-malware

Malware repository

A curated collection of malware tools for analysis and demonstration purposes

computerwarning A curated collection of awesome malware, botnets, and other post-exploitation tools.

GitHub
245 stars
20 watching
33 forks
last commit: almost 4 years ago
Linked from 1 awesome list

awesomeawesome-listcomputer-securitycybersecuritymalwarepost-exploitation

Analysis and reverse engineering
theZoo Repository of live malwares for your own joy and pleasure, created to make the possibility of malware analysis open and available to the public

Botnets
Idisagree 174 over 2 years ago Control remote computers using Discord bot and Python 3

Command and Control
Browser Exploitation Framework (BeEF) 9,918 about 1 month ago Command and control server for delivering exploits to commandeered Web browsers
Merlin 5,110 about 1 month ago Cross-platform post-exploitation HTTP/2 command and control server and agent written in golang
SILENTTRINITY 2,204 about 1 year ago Asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Credential Stuffing Account Checkers
Reference Black Bullet - Single-threaded account checker with captcha bypass features and Selenium WebDriver support, sold for about $30 to $50. ( )
Private Keeper Russian language account checker and takeover tool, sold at prices starting from approximately $1 USD
SNIPR Windows toolkit for credential stuffing across Web (HTTP/S) and email (IMAP) attack surfaces with the ability to encrypt and re-sell ATO configurations, sold for about $20
Reference STORM - Flexible account checker with Cloudflare protection bypass features written in C#. ( )
Sentry MBA Among the oldest and longest in-use account checkers, using OCR for captcha bypass but unable to pass JavaScript anti-bot challenges, sold for between $5 and $20 per configuration file. ( )
Reference Woxy - Email account checker with built-in support for automating password reset and searching email content for valuable information, now cracked and available free of charge. ( )

Evasion
CheckPlease 904 over 3 years ago Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust

Keyloggers
TechNowLogger 448 4 months ago Windows/Linux keylogger generator which sends key-logs via email with other juicy target info

Phishing kits
ActorExpose/PhishKits Collection of phishing kits provided to the public to make the Internet a safer environment

Remote Administration Tools (RATs)
Bella 187 about 2 years ago Pure Python post-exploitation data mining and remote administration tool for macOS
Empire Pure PowerShell post-exploitation agent built on cryptologically-secure communications and a flexible architecture
EvilOSX 2,286 almost 4 years ago Modular RAT that uses numerous evasion and exfiltration techniques out-of-the-box
Pupy 8,490 10 months ago Low-footprint, cross-platform (Windows, Linux, macOS, Android) RAT featuring all-in-memory execution guideline written in Python
RedPeanut 327 over 1 year ago Small RAT developed in .Net Core 2 and its agent in .Net 3.5/4.0, weaponized with several additional utilities
Slackor 458 almost 2 years ago Golang implant that uses Slack as a command and control server
Twittor 765 over 4 years ago Stealthy Python based backdoor that uses Twitter (Direct Messages) as a command and control server

Rootkits
Adore-NG 206 about 9 years ago Rootkit adapted for the 2.6 and 3.x Linux kernels
AdoreForAndroid 37 over 10 years ago Adore rootkit ported to Android
Diamorphine 1,865 over 1 year ago LKM rootkit for Linux Kernels 2.6.x, 3.x, and 4.x
Masochist 124 about 10 years ago Framework for creating XNU based rootkits useful in OS X and iOS security research
Vector-EDK 135 over 9 years ago Commercial UEFI rootkit illegally sold by Hacking Team to numerous governments, leaked by hacker Phineas Phisher in 2015, and the basis of the
vlany 947 about 4 years ago Linux rootkit

Web Shells
BlackArch Webshells Collection 896 over 1 year ago Various webshells that can be installed as a package on BlackArch Linux
DAws 573 over 7 years ago Advanced Web shell
PHP-backdoors 2,211 10 months ago Collection of PHP backdoors, for educational and/or testing purposes only
PHP Exploit Scripts 841 11 months ago Collection of PHP exploit scripts (often but not necessarily always backdoors or web shells), found when investigating hacked servers
PHP WebShells collection 1,888 almost 4 years ago Repository of common PHP Web shells, somewhat dated
PhpSploit 2,237 9 months ago Remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server
SharPyShell 922 about 1 year ago Tiny and obfuscated ASP.NET webshell for C# web applications
SecLists Web Shells 59,209 about 1 month ago Examples of core Web shell functionality in PHP, JSP, ASP(X), ColdFusion, and more
Weevely 3,216 3 months ago Extensible PHP Web shell with numerous out-of-the-box modules

Backlinks from these awesome lists:

More related projects: