剑庭安
首页
黑客安全首页全部安全栏目 黑客技术黑客技术、渗透测试、漏洞利用工具与教程 安全软件安全工具、扫描器、检测与审计软件 病毒分析恶意软件分析、样本、逆向与沙箱 CTF思路CTF 题目、writeup、解题思路与工具 防护思路防御技术、加固、检测响应与蓝队 红蓝攻防红队攻击模拟、蓝队对抗、攻防演练 漏洞知识库漏洞、CVE、PoC、EXP 与安全研究
逆向|反编译
PHP源码PHP 网站源码、程序、系统 APP源码安卓/iOS APP 源码 ASP源码ASP 网站源码与程序 NET源码.NET 网站源码与系统 小程序源码微信/支付宝小程序源码 Dedecms风格模板Dedecms 织梦风格模板 Empirecms风格模板EmpireCMS 帝国风格模板 Discuz商业模板/插件Discuz 商业模板与插件 WordPress主题/插件WordPress 主题与插件 其它源码、模板其它各类源码与模板 游戏源码游戏源码与引擎项目 加密货币源码加密货币、区块链、钱包、USDT/比特币相关源码与工具 手游源码手机游戏源码、服务端、客户端与引擎项目 传奇源码热血传奇、传奇世界、复古传奇等客户端/服务端/引擎源码 页游源码网页游戏、H5 游戏、浏览器游戏源码 端游源码电脑单机游戏、PC 网游客户端/服务端源码
最新万能免驱动支持所有型号打印机下载程序 日历天气老黄历 · 每天同步真实日期与天气
站长工具站长工具 自助开通会员浏览该分类 其他资源qtziy SEO工具SEO工具 站群源码站群源码 泛程序泛程序 蜘蛛模板蜘蛛模板 蜘蛛池蜘蛛池 外链工具外链工具
搜索 自助开通会员🔓 破甲 API
登录 注册
首页 分类列表 病毒分析 awesome-malware-development …
awesome-malware-development - Curated resources for malware dev, reverse enginee 病毒分析 点击放大
作者：admin 发布：2026-10-05

awesome-malware-development - Curated resources for malware dev, reverse enginee

项目说明Awesome Malware De![Awesome]()![Stars]()![License]()Curated collection of the best resources for malware de, rootkits, implants, e, and red-team t…
资源可下载 免费下载 0 条讨论
会员资源
开通会员后即可下载全部资源。
登录后开通会员
会员方案
230浏览量
0讨论
2下载链接
可下载资源状态
内容可验证
更新 2026-10-05
人工审核发布
评论区答疑

awesome-malware-development - Curated resources for malware dev, reverse enginee

项目说明

Awesome Malware De

![Awesome]()
![Stars]()
![License]()

Curated collection of the best resources for malware de, rootkits, implants, e, and red-team tooling.

> ⚠️ Disclaimer
> This repository is for educational, research, ethical hacking, and red-teaming purposes only.
> Any misuse may laws in your jurisdiction. The maintainer is not responsible for illegal activity.

Table of Contents

  • Learning Path

  • Modern Topics (2025–2026)

  • Essentials

  • Tools & Frameworks

  • Open-Source PoCs & Sample Projects

  • Blogs

  • Talks

  • YouTube Channels

  • Courses

  • Books

  • Articles & Writeups

  • Contributing

    • Learning Path

    Beginner → Ad Roadmap

    1. Fundamentals – C, Assembly, Windows internals
    2. Userland Malware – Process injection, loaders, crypters
    3. E – AV/EDR bypass, obfuscation
    4. Kernel & Rootkits – Drivers, hooks, DKOM
    5. Ad – UEFI bootkits, reflecti, C2 implants

    Modern Topics (2025–2026) ← FRESH & HIGHLY RECOMMENDED

    The latest content the community is using right now:

    EDR E & Modern Techniques


  • Endpoint E Techniques (2020–2025): The E (NEW 2025)

  • Bypassing Modern EDRs: Practical E Techniques (2025 Edition) (NEW 2025)

  • EDR E 101: 29 Ways Attackers Are Slipping Past Defenses (NEW 2026)

  • Understanding EDR E Tactics & Defense Methods (NEW 2026)

    • Rust / Nim / Go for Malware De


  • Rust for Malware De (Bishop Fox, 2025) (NEW 2025)

  • NIM Malware De — Introduction (NEW 2025)

  • Rust and Go Malware: Cross-Platform Threats E Traditional Defenses (NEW 2025)

    • Linux Kernel & Rootkits


  • Linux malware de 1: Intro to kernel hacking (2024) (NEW 2024)

  • Singularity: Deep Dive into a Modern Stealth Linux Kernel Rootkit (NEW 2025)

    • UEFI Bootkits & Ad Kernel


  • Awesome Bootkits & Rootkits De (curated list) (NEW 2025)

  • Bootkits-De (NEW 2025)

  • UEFI Bootkits and Kernel-Mode Rootkits De (NEW 2025)

    • Essentials

    Strong C/C++ and x86/x64 assembly knowledge is highly recommended.

    C Programming


  • C for E: Programming Fundamentals

  • learn-c.org

  • C Cheatsheet

    • x86/x64 Assembly


  • Architecture 1001: x86-64 Assembly

  • Intro to x86 Assembly

    • Tools & Frameworks (Updated 2026)

  • Havoc (NEW 2024–2026) – Modern, malleable C2 framework with beautiful GUI

  • Mythic – Highly modular cross-platform C2

  • Sliver – Cross-platform implant framework

  • Donut – Shellcode generator & loader

  • HimitsuShell - Makes shell scripts in to kernel tracing.

  • SysWhispers – Syscall generator for e

  • InlineWhispers – Direct syscall e

    • Open-Source PoCs & Sample Projects

  • TheMalwareGuardian/Awesome-Bootkits-Rootkits-De (NEW 2025)

  • TheMalwareGuardian/Bootkits-De (NEW 2025)

  • ch/malde (NEW 2025) – Beginner malware workshop

  • cr-0w/maldev – Malware de growth repo

  • /MalwareSourceCode – Archi source (historical, research only)

  • stephenfewer/Reflecti

  • h0mbre/Learn-C-By-Creating-A-Rootkit

  • xcellerator/linux_kernel_rootkits

  • MatheuZSecurity/Singularity (NEW 2025) – Modern Linux kernel rootkit

  • JMarchiori13/cred-har – Credential access research: LSASS dumping methods, DPAPI internals, browser credential stores (incl. Chrome App-Bound Encryption), offline SAM parsing. Lab methodology with staged hardening

  • JMarchiori13/process-injection-arsenal – Process injection research: remote thread, APC, early bird, thread hijacking, process hollowing, module stomping, section mapping. Documented PoCs with ATT&CK mapping

  • JMarchiori13/defender-e – Windows Defender e research: 17 technique families × 5 Defender layers matrix (2026). Signatures, AMSI, ETW, cloud protection, BYO

    • Blogs

  • Kremez — Deep di analysis

  • 0xPat — Outstanding malware de series

  • zerosum0x0 — deep technical posts

  • Guitmz — High-quality malde

  • TheXcellerator — Amazing LKM rootkit series

  • cocomelonc (NEW) — Excellent Linux malware & kernel series

  • captmeelo - Excellent writeups check this out!!!

  • iRedTeam - red team notes

    • Talks

  • Horse Pill: A New Type of Linux Rootkit

  • LKM Rootkit Series (playlist)

  • Creating and Countering the Next Generation of Linux Rootkits

  • Kernel Mode Threats and Practical Defenses

  • Alex Ionescu – Ad the State of UEFI Bootkits

  • BlueHat v18: Return of the kernel rootkit malware (Windows 10)

  • BlackAlps 2025: Level Up Your Malware – A Practical Journey Into EDR E (NEW 2025)

    • YouTube Channels

  • AGDC Services — High-quality malware content

  • TheSphinx — Full RAT-from-scratch series

  • Joey Abrams — Code-injection & Linux maldev

  • w3w3w3 — Solid LKM rootkit series

    • Courses

  • RED TEAM Operator: Malware De Essentials (Sektor7)

  • RED TEAM Operator: Malware De Intermediate (Sektor7)

  • RingZerø: Windows Kernel Rootkits

  • CodeMachine: Windows Kernel Rootkits

  • Malde – Malware De Course (NEW 2025–2026) — Continuously updated, 200+ modules, community fa

    • Books

  • *The Art of Computer Virus Research and Defense*

  • *The Giant Black Book of Computer *

  • *Designing BSD Rootkits: An Introduction to Kernel Hacking*

  • *Rootkits and Bootkits*

  • *The Antivirus Hackers’ Handbook*

    • Free Books / PDFs


  • Make your own first FUD crypter

    • Articles & Writeups

    Malware De Fundamentals & Series


  • Malware De – Welcome to the Dark Side: Part 1

  • Art of Malware

  • Malware De Part 1

  • Basic Ransomware guide

  • Master of RATs - How to create your own Tracker

  • Amazing article to read with some good resources (Personal Tale and the Road to Malware De, Resources)

  • Best series i will say if you wanna get into programming/malware de series to follow it will start with learn programming thats needed asm and stuff after that getting into maldev

  • Filess malware

  • Examining the Morris Worm Source Code

  • IOT Malware

  • Roadmap for Malware De and E (NEW 2026)

    • Rootkits (Userland & Kernel)


  • PT_NOTE -> PT_LOAD x64 ELF virus written in Assembly

  • The magic of LD_PRELOAD for Userland Rootkits (good read if you wanna get into rootkits this blog is for userland rootkits)

  • (Recommended Read) if you want to creat your first userland rootkit and you just know C you can go for this blog if you wanna start into rootkit de

  • Complete guide on LKM hacking

  • Becoming-rat-your-system

  • Singularity: Deep Dive into a Modern Stealth Linux Kernel Rootkit (NEW 2025)

    • Injection & Hooking Techniques


  • Function Hooking Part I: Hooking Shared Library Function Calls in Linux

  • Inline Hooking for Programmers (Part 1: Introduction)

  • Inline Hooking for Programmers (Part 2: Writing a Hooking Engine)

  • PE injection for beginners

    • E & Obfuscation


  • Understanding TRITON and the Missing Final Stage of the Attack good read.

  • Windows Defender antivirus bypass in 2025 - part 1 (NEW 2025)

    • Specific Malware & APT Analysis


  • DoublePulsar SMB backdoor analysis

  • Eset Turla Outlook backdoor report

    • Contributing

    See CONTRIBUTING.md

    ---

    Made with ❤️ by the community • v2.0 – Full Merge + Massive 2025–2026 Expansion (April 2026)

    ---

    项目信息

    开发语言：未知

    Star 数：1839

    技术要点

    该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Curated resources for malware dev, reverse engineering, and defensive security research.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

    从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

    使用与学习建议

    1. 下载源码压缩包，解压到本地环境。

    2. 根据项目类型准备对应的运行环境与依赖。

    3. 按照 README 中的步骤完成配置与部署。

    4. 在隔离的测试环境中运行验证，避免影响生产系统。

    免责声明

    本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

    资源标题awesome-malware-development - Curated resources for malware dev, reverse enginee
    所属分类病毒分析
    发布作者admin
    发布时间2026-10-05 23:12:20
    下载权限 免费下载
    附件数量2 个下载链接
    浏览次数230
    讨论数量0
    主题状态正常讨论中

    本资源免费，登录后即可在本页「下载链接」区域获取全部附件。

    请在评论区留言说明具体链接，或联系作者补档。楼主更新后本页会同步最新的下载地址。

    请先阅读正文中的授权说明；未注明的默认仅限站内学习交流，禁止直接搬运到其他站点二次售卖。
    还没有讨论，快来抢沙发～
    登录 后才能参与讨论
    下载链接
    会员才能下载
    登录后开通会员
    同分类推荐
    暂无同类资源
    免费登录即可下载
    查看会员
    放大预览

    © 2026 剑庭安 - 网站开发定制 SEO 优化蜘蛛池代做 在线看手相算命. 保留所有权利。

    Powered by 酷像SEOv3.0

    网站地图 Sitemap.xml
    首页 全部分类 黑客安全 逆向|反编译 精品源码 站长工具自助开通会员其他资源SEO工具站群源码泛程序蜘蛛模板蜘蛛池外链工具创意乐园 搜索 会员服务 登录 注册