malware-samples
jstrosch/malware-samplesMalware samples, analysis exercises and other interesting resources.
binary-analysiscurated-resourceseducation+3
1.7k
jstrosch/malware-samplesMalware samples, analysis exercises and other interesting resources.
sh4hin/androl4bA Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
azr43lkn1ght/dfir-labsHands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…
huskyhacks/pmat-labsLabs for Practical Malware Analysis & Triage
cloudfuzz/android-kernel-exploitationHands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.
owasp/iotgoatDeliberately insecure OpenWrt-based firmware for hands-on IoT security training. Features vulnerability challenges mapped to the OWASP IoT Top 10 for…
owasp/mastg-hacking-playgroundCollection of intentionally insecure iOS and Android apps for learning mobile security testing, reverse engineering, and vulnerability analysis,…
pinksawtooth/how_to_become_a_malware_analystCurated guide to becoming a malware analyst, covering essential knowledge, reverse engineering, analysis tools, and LLM-assisted learning with…
eshard/scaredPython framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…
jweny/shiro-cve-2020-17523Analysis of two authentication bypass techniques for Apache Shiro (CVE-2020-17523) with a reproducible exploit environment and detailed root cause…
rawsec/rawsec-cybersecurity-listCurated inventory of cybersecurity tools and resources covering penetration testing, forensics, OSINT, web security, malware analysis, cryptography,…
jaredcatkinson/malwaremorphologyHands-on security workshop on malware morphology, covering structural analysis techniques, classification concepts, and practical exercises from…
grizzzer/cve-2026-42978-poc-researchCVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon/ETW…
kryptsec/oasisOpen-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
gavz/cve-2026-21509-pocEducational PoC generating a harmless DOCX with dummy OLE artifacts to test EDR/AV visibility, ASR rules, and sandbox analysis for CVE-2026-21509.…
chenaotian/cve-2022-0185CVE-2022-0185 POC and Docker and Analysis write up
gs-ai/amber-iciAMBER ICI v5: local-first Ollama investigative command center with case-scoped evidence, agent chains, hybrid retrieval, streaming analysis, graph…