Malware research archive with papers, samples, writeups, and historical security material.
Screenshot unavailable. The listing stays available while a preview is prepared.
Jotti's malware scan is a free service that scans suspicious files with several anti-virus programs. Users can submit up to five files at once, with a 250MB limit per file. Files are shared with anti-virus companies so their products' detection accuracy can be improved.
Cisco Talos Intelligence Group is a threat intelligence operation that publishes threat research and an Intelligence Center with web reputation, content categorization, sender IP and domain reputation, file reputation and IPS/IDS resources. It also offers incident response services for emergency network security needs and proactive intelligence-led services.
Malpedia is a free service from Fraunhofer FKIE aimed at providing a resource for rapid identification and actionable context when investigating malware. Curated contributions are intended to support accountable quality and reproducible research. Not all content is publicly available; an account is needed to access all data, such as malware samples and non-public YARA rules, and it is operated as an invite-only trust group.
YARA is a tool aimed at helping malware researchers identify and classify malware samples. It creates descriptions of malware families, called rules, based on textual or binary patterns; each rule consists of strings and a boolean expression. YARA is multi-platform, running on Windows, Linux and Mac OS X, and can be used via its command-line interface or from Python scripts with the yara-python extension.
A browser-based utility that converts infix expressions to postfix or prefix notation and shows the conversion steps. It also evaluates postfix and prefix expressions. The page states that spaces must not be used in the expression. Algorithm steps for the postfix and prefix conversions are presented, and the page was updated on 26 February 2023.
mitmproxy is a free and open source interactive HTTPS proxy. It can be used to intercept, inspect, modify and replay web traffic, including HTTP/1, HTTP/2, HTTP/3, WebSockets and other SSL/TLS-protected protocols. It offers a command line interface, a graphical web interface, and a Python API for writing addons and scripts. Downloads are available for Windows, Linux, macOS and Docker.
Community notes
Be the first to share how this project worked for you.
Sign in with a verified account to leave a review or join the discussion.
Sign in to reviewKeep exploring
Jotti's malware scan is a free service that scans suspicious files with several anti-virus programs. Users can submit up to five files at once, with a 250MB limit per file. Files are shared with anti-virus companies so their products' detection accuracy can be improved.
Cisco Talos Intelligence Group is a threat intelligence operation that publishes threat research and an Intelligence Center with web reputation, content categorization, sender IP and domain reputation, file reputation and IPS/IDS resources. It also offers incident response services for emergency network security needs and proactive intelligence-led services.
Malpedia is a free service from Fraunhofer FKIE aimed at providing a resource for rapid identification and actionable context when investigating malware. Curated contributions are intended to support accountable quality and reproducible research. Not all content is publicly available; an account is needed to access all data, such as malware samples and non-public YARA rules, and it is operated as an invite-only trust group.
YARA is a tool aimed at helping malware researchers identify and classify malware samples. It creates descriptions of malware families, called rules, based on textual or binary patterns; each rule consists of strings and a boolean expression. YARA is multi-platform, running on Windows, Linux and Mac OS X, and can be used via its command-line interface or from Python scripts with the yara-python extension.
A browser-based utility that converts infix expressions to postfix or prefix notation and shows the conversion steps. It also evaluates postfix and prefix expressions. The page states that spaces must not be used in the expression. Algorithm steps for the postfix and prefix conversions are presented, and the page was updated on 26 February 2023.
mitmproxy is a free and open source interactive HTTPS proxy. It can be used to intercept, inspect, modify and replay web traffic, including HTTP/1, HTTP/2, HTTP/3, WebSockets and other SSL/TLS-protected protocols. It offers a command line interface, a graphical web interface, and a Python API for writing addons and scripts. Downloads are available for Windows, Linux, macOS and Docker.
