Awesome Malware Analysis
This repository curates tools and resources for analyzing malware, including material for researchers and practitioners.
About Awesome Malware Analysis
A curated GitHub list of tools and resources for malware analysis, maintained in the repository rshipp/awesome-malware-analysis. It organizes links into sections covering malware collection (anonymizers, honeypots, malware corpora), open source threat intelligence tooling, and analysis tools such as online scanners and sandboxes, domain analysis, browser malware, document and shellcode handling, file carving, deobfuscation, debugging and reverse engineering, network forensics, memory forensics, Windows artifacts, and storage and workflow. An additional resources section points to books and related curated lists, and a Chinese translation of the list is included in the repository.
The repository is a reference index rather than a set of analysis tools: visitors follow links to third-party projects and services, and some listed sample repositories require registration. A CONTRIBUTING.md file and a LICENSE file are present, and the project describes itself as inspired by other "awesome" lists.
Key features
- Curated links to malware sample corpora and honeypot projects
- Section on harvesting and analyzing IOCs from open sources
- Categories for scanners, sandboxes, domain and document analysis
- Lists for reverse engineering, memory and network forensics
- Chinese translation of the list included in the repository
- Contribution guidelines and license file included
Best for: Security researchers and practitioners who want a categorized starting point for finding malware analysis tools, sample sources and reference material.
Good for
- Broad topical organization spanning samples, tooling and reference resources
- Combines tool listings with books and related curated lists
- Open to contributions through its documented contributing guidelines
Watch out for
- Acts as an index of links rather than providing the analysis tools itself
- Some listed sample repositories require registration
- Quality and availability depend on the external projects linked
Awesome Malware Analysis at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
Awesome Malware Analysis alternatives
Tools and sites you could use instead, ranked by how closely they match.
Browse community-maintained materials and plugins for the Ghidra reverse engineering framework.
Browse plugins for x64dbg, a Windows debugger used for reverse engineering and malware analysis.
Browse Android reverse engineering training, tools, and learning resources in this curated repository.
Open source
24 alternatives
Malware investigation and reverse engineering are the focus of REMnux, a Linux toolkit that bundles analysis tools.
CyberSources curates more than 540 cybersecurity tools, with the project emphasizing ethical security resources.
CrowdSec provides open-source intrusion prevention, web application firewall, and bot detection tools.
Open source
24 alternativesPopular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
Awesome Malware Analysis FAQ
Is a Chinese version of the list available?
Yes. The repository includes a Chinese translation file named 恶意软件分析大合集.md.
Does the repository host malware samples?
No. It lists and links to sample repositories, corpora and analysis tools maintained elsewhere.
How can I contribute to the list?
The repository includes a CONTRIBUTING.md file describing how to contribute.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.