awesome-malware - :computer::warning: A curated collection of awesom

项目说明

Awesome Malware ![Awesome]()

> A curated collection of awesome malware, botnets, and other post-exploitation tools.

Malware is software intentionally designed to cause damage or provide unauthorized access to a computer, server, or computer network. While not exclusive, this list is heavily biased towards Free Software projects. For pre-exploitation TTPs, see awesome-pentest. For defenses, see awesome-cybersecurity-blueteam.

Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details. This work is licensed under a Creati Attribution 4.0 International License.

> :warning: :memo: Please note that this compilation is intended for educational and demonstration purposes only.

Contents

Analysis and reverse engineering

See awesome-malware-analysis.

Banking trojans

> :construction: TK-TODO

Botnets

Command and Control

(Also known as *C2* and *C&C*.)

Credential Stuffing Account Checkers

Also known as *Account Takeover (ATO)* or *account cracking*.

* Black Bullet - Single-threaded account checker with captcha bypass features and Selenium WebDri, sold for about $30 to $50. (Reference)
* Private Keeper - Russian language account checker and takeover tool, sold at prices starting from approximately $1 USD.
* SNIPR - Windows toolkit for credential stuffing across Web (HTTP/S) and email (IMAP) attack surfaces with the ability to encrypt and re-sell ATO configurations, sold for about $20.
* STORM - Flexible account checker with Cloudflare protection bypass features written in C#. (Reference)
* Sentry MBA - Among the oldest and longest in-use account checkers, using OCR for captcha bypass but unable to pass Ja anti-bot challenges, sold for between $5 and $20 per configuration file. (Reference)
* Woxy - Email account checker with built-in support for automating password reset and searching email content for information, now cracked and a free of charge. (Reference)

Data stealers

> :construction: TK-TODO

E

Keyloggers

* TechNowLogger - Windows/Linux keylogger generator which sends key-logs with other juicy target info.

Phishing kits

(Also known as *phishkits*, one word.)

* ActorExpose/PhishKits - Collection of phishing kits provided to the public to make the Internet a safer en.

RAM scrapers

> :construction:
>
> See RamScraper for now.

Ransomware

> :construction: TK-TODO

Remote Administration Tools (RATs)

Some Command and Control tools also o with RAT software.

(Also known as *Remote Access Trojan* or *post-exploitation agent*.)

Rootkits

Web Shells

(Also known as *webshells*, one word.)

License

![CC-BY]()

This work is licensed under a Creati Attribution 4.0 International License.

项目信息

开发语言：未知

Star 数：281

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕:computer::warning: A curated collection of awesome malware, botnets, and other post-exploitation tools.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。