viruses

NameLast commit messageLast commit date
androidchore: sync local state after restore (push updates, no pull)3 months ago
asmchore: sync local state after restore (push updates, no pull)3 months ago
botnetchore: sync local state after restore (push updates, no pull)3 months ago
engineadd unified archive headers to 18,080 source files7 months ago
exploitchore: sync local state after restore (push updates, no pull)3 months ago
infectoradd unified archive headers to 18,080 source files7 months ago
linuxadd unified archive headers to 18,080 source files7 months ago
macosmerge vxunderground + RamadhanAmizudin archives into unified taxonomy7 months ago
phishingmerge vxunderground + RamadhanAmizudin archives into unified taxonomy7 months ago
prankadd decompiled wannacry; add archive comment headers; remove meta.yaml; flatten lockbit structure; update readme7 months ago
ransomwarechore: sync local state after restore (push updates, no pull)3 months ago
researchchore: sync local state after restore (push updates, no pull)3 months ago
rootkitadd unified archive headers to 18,080 source files7 months ago
trojanadd unified archive headers to 18,080 source files7 months ago
webshelladd unified archive headers to 18,080 source files7 months ago
wormmerge vxunderground + RamadhanAmizudin archives into unified taxonomy7 months ago
.gitignoreadd .gitignore, remove pycache7 months ago
README.mdmerge vxunderground + RamadhanAmizudin archives into unified taxonomy7 months ago
SOURCES.jsonadd TotalRecall Windows Recall extraction exploit6 months ago
stamp-headers.pychore: sync local state after restore (push updates, no pull)3 months ago
README.md

viruses

Malware archive for security research and writeups. All entries are indexed into code.db and browsable at krisyotam.com/code.

Includes curated sources from vxunderground/MalwareSourceCode and RamadhanAmizudin/malware, reorganized into a unified taxonomy.

Structure

android/        mobile malware (RATs, stealers, banking trojans)
asm/            ~1,100 ancient DOS/Win9x ASM virus source codes (alpha-organized + legacy-win*)
botnet/         botnet frameworks and C2 infrastructure (Mirai, Grum, etc.)
engine/         polymorphic and mutation engines (Win32, BAT, Linux, VBS)
exploit/        CVE-specific exploits, proof-of-concepts, and exploit kits
infector/       file infectors and PE/ELF parasites
linux/          Linux-specific malware (backdoors, rootkits, trojans, Mirai family)
macos/          macOS malware
phishing/       phishing kits and templates
prank/          harmless educational denial-of-service scripts
ransomware/     ransomware source code and leaked builders
research/       malware research, techniques, and libraries
rootkit/        kernel and userland rootkits
trojan/         trojans, RATs, stealers, keyloggers, and malware families
webshell/       PHP webshells, C2 panels, and web-based backdoors
worm/           self-replicating worms

Archive Header Standard

Every source file carries a standard comment header. Format varies by language but fields are consistent:

C / C++ / Java

/*
  name      <name>
  type      <category>
  cve       <CVE or —>
  year      <year>
  os        <target os>
  authors   <original authors>
  source    <where this was obtained>
  archived  krisyotam
  notes     <one-line context>
 */

Python

# ------------------------------------------------------------
# name      <name>
# type      <category>
# ...
# archived  krisyotam
# ------------------------------------------------------------

Shell / Batch / VBS follow the same pattern using their respective comment syntax (#, ::, ').

HTML

<!--
     name      <name>
     ...
     archived  krisyotam
-->

Disclaimer

For educational and research purposes only.