A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
GRR Rapid Response: remote live forensics for incident response
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
PowerForensics provides an all in one platform for live disk forensic analysis
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
CyLR - Live Response Collection Tool
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Windows Live Artifacts Acquisition Script
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Use Cloudflare Turnstile in Phoenix
- captcha
- cloudflare
- elixir
- liveview
XboxLive oauth2 login for vweb
- vweb
- vlang
- xbox-live
- oauth2
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
- nextjs
- open-source
- phishing-detection
- scam-detection
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.