phpMussel

What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

masc

masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...

CVE-2025-20260-POC

CVE-2025-20260 EXPLOIT This is a proof of concept for CVE-2025-20260. This is a vulnerability in the ClamAV software's PDF scanning processes. By sending a specially crafted, malicious PDF file it is possible to cause a buffer overflow, resulting in a denial of service or arbitrary code execution...

pompelmi

pompelmi — ClamAV Antivirus Scanning for Node.js ClamAV antivirus scanning for Node.js — clean, typed, zero dependencies. pompelmi Pro — audit logs, priority support, and enterprise features. Learn more Quick Start root@kitploit: Scan a file npx pompelmi scan ./uploads/file.pdf Scan a directory n...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

clamav

ClamAV ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. Documentation & FAQ ClamAV documentation is hosted at docs.clamav.net. The source archive for each release also includes a copy of the documentation for offline reading. You can...

clamtk

Readme for clamtk Note: This program is no longer maintained. https://gitlab.com/davem/clamtk/-/issues/144 This README was last checked or updated on 20240402. Table of contents: 1. About 2. Contributing 3. Installation 4. Usage 5. Plugins 6. Troubleshooting 7. Other 8. Thank you 9. Contact About...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV Usage To create malicious DMG file root@kitploit: git clone https://github.com/nokn0wthing/CVE-2023-20052.git cd CVE-2023-20052 sudo docker build -t cve-2023-20052 . sudo docker run -v $pwd:/exploit -it...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CVE-2023-20052

CVE-2023-20052 Exploit - Fixed Build Fixed Docker build for CVE-2023-20052 ClamAV XXE vulnerability that actually compiles. What Was Broken The original exploit fails to build on modern systems: ❌ OpenSSL 3.0 compatibility errors ❌ HMACCTX struct incomplete type errors ❌ Implicit function...

CVE-2018-0202

CVE-2018-0202 Security & Privacy in ComputingFall 2018 Final Group Project, clamscan vulnerability in Cisco's ClamAV 0.99.3 Members: Jay Chow, Harry Luo, Benfang Wang, Johns Hopkins University Information Security Institute Detailed steps on how we installed this vulnerable version of ClamAV...

masc

masc 一款在 CyperCamp 2017 黑客松期间开发的恶意软件（网络）扫描器 关于 主页 PyPI 功能 目前，某些功能适用于任何类型的网站（自定义或CMS），而某些功能仅适用于特定平台： 使用 OWASP WebMalwareScanner 校验和、YARA 规则数据库以及 ClamAV 引擎（如果可用）扫描任何网站的恶意软件 执行一些清理操作以增强网站防护 监控网站的变更。详细信息会记录在日志文件中 扫描您的网站以了解是否感染了恶意软件 列出本地备份 日志支持 备份网站 恢复网站 扫描可疑文件并与干净安装版本进行比较（适用于 Wordpress 和 Drupal）...

MemProcFS-Analyzer

MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit for CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution The exploit is for educational purposes only and should not be used for malicious purposes...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter 0.91.2 CVE-2007-4560. Remote root command injection via SMTP RCPT TO headers. About Python port of the classic Sendmail/ClamAV-Milter remote root exploit originally written in Perl by Eliteboy...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile Advanced Android Antivirus With Threat Protection ⚠️ Project on hold. This project did not get enough interest, so I have paused it for a while. Development has moved to HydraDragonAntivirus. Discord Community Server: https://discord.gg/7XMCuj5mbP Logo made by discord user...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

linux-malware-detect

Linux Malware Detect LMD Linux 恶意软件扫描器 — 多阶段威胁检测（MD5、SHA-256、HEX、YARA、统计分析），ClamAV 集成，实时 inotify 监控，隔离/清除/恢复操作，以及多渠道告警（电子邮件、Slack、Telegram、Discord）。 C 2002-2026, R-fx Networks C 2026, Ryan MacDonald 依据 GNU GPL v2 许可 2.0.1 新特性 原生扫描引擎提速 43 倍 — 原生扫描流水线已使用批量并行处理完全重写。基于约 10,000 个文件的真实基准测试： 版本| 运行时间| 文...

SUSE SLES15: clamav / clamav-devel / clamav-docs-html / clamav-milter / etc (SUSE-SU-2026:4208-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4208-1 advisory. - CVE-2026-20337: Improper boundary checks for content in zip archive parser bsc1274597. - CVE-2026-20338: invalid free due to bad...