Malware Python Packages

ioc-fanger

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

volatility3

Volatility 3.0 development

blocklist-aggregator

Domains blocklist aggregator - Create your own list from several sources.

apk-info

Fast, malware-robust parser for Android APK/XAPK/APKM files

flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

blint

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

malwaredb

MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery

virustotal-python

A Python library to interact with the public VirusTotal v3 and v2 APIs.

wordfence

Wordfence malware and vulnerability scanner command line utility.

autoit-ripper

Extract AutoIt scripts embedded in PE binaries

debloat

A GUI and CLI tool for removing bloat from executables

malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

die-python

Native Python3 bindings for @horsicq's Detect-It-Easy

pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

yaraast

A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation

pyimpfuzzy

Fuzzy Hash calculated from import API of PE files

yaralyzer

Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.

malwarebazaar

Python based CLI for MalwareBazaar

malwi

malwi - AI Python Malware Scanner

yarobot

Simple YARA rules generator with web interface, API, and cli

dumpulator

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

autopyara

Python Package of AutoPYara

wifiphisher

The Rogue Access Point Framework