A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
Repository Index
47,133 repositories indexed
1–24 of 40 · Most stars
Malicious traffic detection system
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
- asn1
- x509
- certificate
- crl
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
Collection of android malware samples
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Collection of almost 40.000 javascript malware samples
- malware-samples
- malware-research
- javascript
- malware-jail
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
Documenting the unofficial and internal Steam Web API
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
Collection of example YARA-L rules for use within Google Security Operations
Fast HTTP enumerator
- http
- fuzz
- fuzzer
- enumerator
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Delphi Detours Library
- hooks
- detours
- x86-64
- windows
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
- launcher
- payload
- elf
- elf-binaries
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
Telnet Honeypot
- honeypot
- botnet
- python
- telnet
Spam Honeypot with Intelligent Virtual Analyzer