Discover 3 open source Malware Analysis repositories from GitHub, each with an analysis of what it does, key features, use cases and alternatives. Malware Analysis projects here are most often combined with Python, Cybersecurity and Security Tools. Last updated October 31, 2026.
Citadel is a self-hosted framework for static analysis of Windows PE payloads, combining capability mapping, similarity checks, and a web dashboard. It suits malware researchers and red teams investigating detections, but has had no recent development activity.
InactiveHealth 16/100
Malwoverview is a Python CLI for quickly investigating malware, files, URLs, IPs, domains, and vulnerabilities across threat-intelligence services. It combines local triage and IOC/YARA tools with optional API-backed lookups and AI enrichment.
ActiveHealth 40/100
Hexora scans Python code for malicious patterns using rule-based analysis, a file-level machine-learning score, and the AST parser from Astral's Ruff. It is aimed at security teams auditing packages, dependencies, and suspicious scripts.
ActiveHealth 34/100