Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

Veil 3.1.X (Check version info in Veil at runtime)

Loki - Simple IOC and Incident Response Scanner

The project where literally anything* goes.

Veil Evasion is no longer supported, use Veil 3.0!

ClamAV Development - FAQ is here: https://github.com/Cisco-Talos/clamav-faq

VirusTotal Wanna Be - Now with 100% more Hipster

Undetectable Windows Payload Generation

windows kernel security development

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Python antivirus evasion tool

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Antivirus evasion project

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

Modular file scanning/analysis framework

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

A hackable malware sandbox for the 21st Century

PHP-based anti-virus anti-trojan anti-malware solution.

TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

Self-hosted VirusTotal / MetaDefender wannabe with API, demo UI and Scanners running in Docker.

Armadito antivirus main repository

List of real-world threats against endpoint protection software

dnxfirewall (dad's next-gen firewall), a pure Python next generation firewall built on top of Linux kernel/netfilter.

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.