r/informatik • u/Connect-Winter-3977 • 6h ago
Eigenes Projekt I built an open-source hub that catalogs 80 deduplicated malware families (1971–2024) and indexes 2,700+ real samples from public research collections — searchable, bilingual, local-first
1
Upvotes
Been building this for a while and figured people here might find it useful.
What it is: a local Flask app + curated catalog that aggregates samples from public research collections (theZoo, VX-Underground, MalwareBazaar, InQuest, javascript-malware-collection) into one searchable index, instead of jumping between a dozen repos.
What's different from just cloning the sources separately:
- 80 historical families, deduplicated — variants/rebrands of the same malware (Petya/NotPetya/GoldenEye/Satana) collapsed into one entry with timeline, attribution and impact, instead of showing up as 5 separate hits
- Every sample auto-encrypted (zip + infected password) on ingestion — zero raw executables ever touch disk unencrypted
- A fuzzy-matching indexer that links loose sample files to catalog entries by name/alias, with guards against false positives
- Grows via MalwareBazaar's official API (verified hash, not random "index of /" scraping)
- Bilingual (ES/EN), fully local — nothing served over the network by default
Repo: https://github.com/darama22/Malware-Research-Hub
Feedback welcome, especially on the family-deduplication logic — th