Process Hollowing Packer

Resident Http(s) Command Execution Bot

malware source codes

A Polymorphic, RSA 4096 AES 256, Crypter that demands BitCoins (statically)

No repository description provided.

Remote Administration Tool for Windows

find and kill injectedThreads from memory

pieces of dirty quick code. possible error checking or none.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Collection of various llvm passes

No repository description provided.

No repository description provided.

No repository description provided.

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

Repeatable, reboot resilient windows environment installations made easy using Chocolatey packages

No repository description provided.

Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.

No repository description provided.

An advanced memory forensics framework

No repository description provided.

Diablo is a retargetable link-time binary rewriting framework

Fancy Bear Source Code

Proof of Concepts (PE, PDF...)

POSHSPY backdoor code

zeus-style banking trojan

No repository description provided.

Mirror of users section of rootkit.com

pefile is a Python module to read and work with PE (Portable Executable) files

No repository description provided.

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

An open-source, free protector for .NET applications

FileInsight-plugins: tiny plugins for McAfee FileInsight hex editor useful for various kind of decoding tasks in malware analysis.

Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.

Multiple Agent based Pluggable Defense System

No repository description provided.

Automatically exported from code.google.com/p/cerberus-software-protector

Volume Serial number changer

No repository description provided.