#Ransomware

Showing 60 of 67 repositories tagged #ransomware, ranked by stars

StevenBlack
StevenBlack
hosts

๐Ÿ”’ Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Score
100
โ˜… 30.7k โ‘‚ 2.4k +4/day
Python
CYB3RMX
CYB3RMX
Qu1cksc0pe

All-in-One malware analysis tool.

Score
83
โ˜… 2.0k โ‘‚ 259 +5/day
YARA
hectorm
hectorm
hblock

Improve your security and privacy by blocking ads, tracking and malware domains.

Score
100
โ˜… 2.0k โ‘‚ 114 โ€”
Shell
fabrimagic72
fabrimagic72
malware-samples

A collection of malware samples caught by several honeypots i manage

Score
89
โ˜… 1.8k โ‘‚ 422 +1/day
mthcht
mthcht
awesome-lists

Awesome Security lists for SOC/CERT/CTI

Score
98
โ˜… 1.7k โ‘‚ 200 โ€”
YARA
BushidoUK
BushidoUK
Ransomware-Tool-Matrix

A resource containing all the tools each ransomware gangs uses

Score
96
โ˜… 1.4k โ‘‚ 155 +1/day
alvin-tosh
alvin-tosh
Malware-Exhibit

๐Ÿš€๐Ÿš€ This is a ๐ŸŽ‡๐Ÿ”ฅ REAL WORLD๐Ÿ”ฅ ๐ŸŽ‡ Malware Collection I have Compiled & analysed by researchers๐Ÿ”ฅ to understand more about Malware threats๐Ÿ˜ˆ, analysis and mitigation๐Ÿง.

Score
82
โ˜… 1.2k โ‘‚ 197 +1/day
Assembly
ForbiddenProgrammer
ForbiddenProgrammer
conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

Score
84
โ˜… 1.1k โ‘‚ 262 +1/day
Batchfile
mauri870
mauri870
ransomware

A POC Windows crypto-ransomware (Academic). Now Ransom:Win32/MauriCrypt.MK!MTB

Score
100
โ˜… 969 โ‘‚ 410 +1/day
Go
Err0r-ICA
Err0r-ICA
Ransomware

Ransomwares Collection. Don't Run Them on Your Device.

Score
78
โ˜… 833 โ‘‚ 108 +5/day
Shell
tarcisio-marinho
tarcisio-marinho
GonnaCry

A Linux Ransomware

Score
33
โ˜… 782 โ‘‚ 401 โ€”
Python
dmdhrumilmistry
dmdhrumilmistry
pyhtools

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

Score
67
โ˜… 644 โ‘‚ 99 โ€”
Python
ncorbuk
ncorbuk
Python-Ransomware

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

Score
17
โ˜… 631 โ‘‚ 151 โ€”
Python
mstfknn
mstfknn
malware-sample-library

Malware sample library.

Score
76
โ˜… 603 โ‘‚ 175 โ€”
C++
cryptwareapps
cryptwareapps
Malware-Database

A large repository of malware samples with 2500+ malware samples & source codes for a variety of platforms by Cryptware Apps.

Score
93
โ˜… 594 โ‘‚ 131 +4/day
Assembly
mazen160
mazen160
shennina

Automating Host Exploitation with AI

Score
0
โ˜… 555 โ‘‚ 103 โ€”
Python
Cryakl
Cryakl
Ransomware-Database

For educational purposes only, samples of ransomware/wiper trojans including screenshots/ransom-notes.

Score
95
โ˜… 526 โ‘‚ 113 +1/day
droidefense
droidefense
engine

Droidefense: Advance Android Malware Analysis Framework

Score
73
โ˜… 480 โ‘‚ 106 โ€”
Java
SitinCloud
SitinCloud
Owlyshield

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).

Score
67
โ˜… 429 โ‘‚ 39 โ€”
Rust
HugoLB0
HugoLB0
Ransom0

Ransom0 is a open source ransomware made with Python, designed to find and encrypt user data.

Score
50
โ˜… 361 โ‘‚ 68 โ€”
Python
prodaft
prodaft
malware-ioc

This repository contains indicators of compromise (IOCs) of our various investigations.

Score
80
โ˜… 318 โ‘‚ 32 โ€”
Python
ecstatic-nobel
ecstatic-nobel
OSweep

Don't Just Search OSINT. Sweep It.

Score
62
โ˜… 317 โ‘‚ 65 โ€”
Python
mitchellkrogza
mitchellkrogza
The-Big-List-of-Hacked-Malware-Web-Sites

This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.

Score
65
โ˜… 317 โ‘‚ 95 +2/day
Shell
kh4sh3i
kh4sh3i
Ransomware-Samples

Small collection of Ransomware organized by family.

Score
64
โ˜… 287 โ‘‚ 84 +1/day
codesiddhant
codesiddhant
Jasmin-Ransomware

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to overcome the risk of external attacks.

Score
60
โ˜… 286 โ‘‚ 81 โ€”
C#
zR00t1
zR00t1
WannaCry

ๅŸบไบŽC#็ผ–ๅ†™็š„WannaCryๆจกๆ‹Ÿ็—…ๆฏ’๏ผŒ้€šๅธธๅบ”็”จไบŽ็ฝ‘็ปœๅฎ‰ๅ…จๅบ”ๆ€ฅๆผ”็ปƒ

Score
58
โ˜… 278 โ‘‚ 67 โ€”
C#
lawndoc
lawndoc
RanSim

Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in a controlled setting.

Score
56
โ˜… 245 โ‘‚ 39 โ€”
PowerShell
bl4de
bl4de
research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Score
55
โ˜… 211 โ‘‚ 46 โ€”
JavaScript
enginestein
enginestein
Virus-Collection

The best virus collection you will find, ever.

Score
51
โ˜… 204 โ‘‚ 34 โ€”
C++
badchars
badchars
darknet-mcp-server

66-tool MCP server for dark web intelligence โ€” breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

Score
91
โ˜… 199 โ‘‚ 36 +7/day
TypeScript
gharty03
gharty03
Conti-Ransomware

Full source of the Conti Ransomware Including the missing Locker files from the original leak. I have fixed some of the errors intentionally introduced by the leaker to prevent the locker from being built. The Queue header file which implements a few linked list data structures that Conti uses for task scheduling in the Threadpool had several missing commas, there are still errors which I believe to be the result of a missing #ifdef pre-processsor macro in one of the header files but haven't had time to find it. Will be uploading English Translated Documentation In the future

Score
53
โ˜… 180 โ‘‚ 53 โ€”
C++
d-Raco
d-Raco
android-malware-source-code-samples

Android malware source code dataset collected from public resources.

Score
45
โ˜… 139 โ‘‚ 18 โ€”
PanagiotisDrakatos
PanagiotisDrakatos
JavaRansomware

Java Ransomware

Score
87
โ˜… 130 โ‘‚ 69 +1/day
Java
AiGptCode
AiGptCode
AiGPT-WordPress-Exploitation-Framework

AiGPT started from the concept of CVEโ€‘2024โ€‘27956 , the WP Automatic CSV injection โ€” but has been completely rebuilt into a multiโ€‘vector, unauthenticated WordPress exploitation engine. It now chains 13 realโ€‘world CVEs to create an administrator account or drop a web shell directly, then automatically injects a reverse shell into the active theme

Score
85
โ˜… 127 โ‘‚ 33 โ€”
Python
PeterDaveHello
PeterDaveHello
threat-hostlist

Comprehensive domain blocklists for ๐Ÿšจ threats (๐Ÿ•ทmalware, ๐ŸŽฃphishing, ๐Ÿ•ต๏ธspyware, ๐Ÿค–botnets). Ideal for DNS-based filtering tools like Pi-Hole, AdGuard Home, Blocky.

Score
49
โ˜… 117 โ‘‚ 16 โ€”
tidalcyber
tidalcyber
cyber-threat-profiling

A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense

Score
42
โ˜… 105 โ‘‚ 22 โ€”
AiGptCode
AiGptCode
Ai-Security-URL

functions to exploit common web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Path Traversal.

Score
0
โ˜… 93 โ‘‚ 16 โ€”
Python
alvin-tosh
alvin-tosh
Kenyatta-Ransomware

This will encrypt ๐Ÿค your files using AES-256-CTR, then RSA-4096๐Ÿ˜ตโ€๐Ÿ’ซto secure the exchange with the server, or can use the Tor SOCKS5 Proxy๐Ÿ˜Ž -- Functionality is based on Cryptolocker๐Ÿ˜ˆ ransomware. Be cool๐Ÿ˜‰

Score
40
โ˜… 84 โ‘‚ 21 โ€”
Go
shantoroy
shantoroy
intro-2-cybersecurity-in-python

This is a repository containing Python code examples for educational purposes in the field of cybersecurity. The code covers topics such as malware, security strategies, and more. It is a useful resource for those interested in learning about the technical aspects of cybersecurity.

Score
35
โ˜… 80 โ‘‚ 17 โ€”
Python
Cybersight-Security
Cybersight-Security
Malware-Samples

This repository contains 130 malware and ransomware samples for research and analysis purposes.

Score
36
โ˜… 78 โ‘‚ 19 โ€”
jflyup
jflyup
goMS17-010

Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)

Score
0
โ˜… 73 โ‘‚ 24 โ€”
Python
codingo
codingo
Ransomware-Json-Dataset

Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.

Score
33
โ˜… 73 โ‘‚ 18 โ€”
Python
thedudefello
thedudefello
ToxicDatabase

Just another malware database.

Score
47
โ˜… 64 โ‘‚ 14 โ€”
C
albertzsigovits
albertzsigovits
malware-notes

Notes and IoCs of fresh malware

Score
27
โ˜… 63 โ‘‚ 7 โ€”
YARA
Pyran1
Pyran1
MalwareCollection

Popular Malware-Samples for research and educational purposes.(60+ Samples!)

Score
38
โ˜… 61 โ‘‚ 29 โ€”
Ort0x36
Ort0x36
Dimorf

Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OSยดs

Score
29
โ˜… 60 โ‘‚ 11 โ€”
Python
justakazh
justakazh
LazyWare

A simple Ransomware Generator

Score
31
โ˜… 53 โ‘‚ 16 โ€”
Python
JMousqueton
JMousqueton
CTI-MSTeams-Bot

๐Ÿค– Bot to get the last Cyber Security information in a Microsoft Teams channel ๐Ÿดโ€โ˜ ๏ธ

Score
75
โ˜… 51 โ‘‚ 10 โ€”
Python
privtools
privtools
ransomposts

Ransomware groups posts

Score
69
โ˜… 46 โ‘‚ 4 โ€”
Python
f6-dfir
f6-dfir
Ransomware

A structured, continuously updated threat-intelligence repository focused on ransomware families and threat actors.

Score
71
โ˜… 43 โ‘‚ 7 โ€”
Python
Zzutiky666
Zzutiky666
LockBit

This is not a crack and not a reverse either. Lockbit RW Source codes have been completely leaked. I'm sharing it so that you don't pay for such things for nothing.

Score
25
โ˜… 42 โ‘‚ 15 โ€”
C++
VirusSign
VirusSign
malware-samples

Live malware samples and database, daily update.

Score
18
โ˜… 40 โ‘‚ 3 โ€”
r3nt0n
r3nt0n
markransom

Simple but sharp ransomware

Score
24
โ˜… 38 โ‘‚ 17 โ€”
Python
Idov31
Idov31
rustomware

Simple ransomware written in Rust. Part of the building a rustomware blog post.

Score
22
โ˜… 37 โ‘‚ 5 โ€”
YARA
saferwall
saferwall
malware-souk

Collaborative malware exchange repository.

Score
16
โ˜… 34 โ‘‚ 6 โ€”
Python
TechSavvyTaco
TechSavvyTaco
Android-Termux-Ransomware-Proof-of-Concept

This project provides insights into how ransomware operates without the need to install any applications.

Score
15
โ˜… 28 โ‘‚ 8 โ€”
Python
gau820827
gau820827
Ransome-killer

This is the project on ransomeware detection using machine learning.

Score
13
โ˜… 27 โ‘‚ 7 โ€”
Python
0x00wolf
0x00wolf
PATHBYTER-Hybrid-Encryption-Ransomware-with-Multiprocessing-in-Python

Pathbyter is a lightning fast proof-of-concept ransomware that uses RSA wrapped AES, multiprocessing, in memory key encryption, appends encrypted AES keys to files, and other tactics utilized by advanced threat actors like Conti, REvil, WannaCry, Ryuk, Lockbit, etc.

Score
9
โ˜… 26 โ‘‚ 2 โ€”
Python
calinux-py
calinux-py
Flipper

FlipperZero - Mix of random flipper zero ducky scripts

Score
44
โ˜… 26 โ‘‚ 2 โ€”
Sokow86
Sokow86
awesome-malware-resources

Just another collection of links, tools, reports and other stuff

Score
18
โ˜… 25 โ‘‚ 11 โ€”
Python
Related Topics
#malware#cybersecurity#malware-analysis#python#threat-intelligence#malware-research#security#malware-samples#hacking#trojan#virus#threat-hunting

ยฉ 2026 GitRepoTrend ยท GitHub repositories by topic ยท Updated weekly