I built an open-source hub that catalogs 80 deduplicated malware families (1971–2024) and indexes 2,700+ real samples from public research collections — searchable, bilingual, local-first
Been building this for a while and figured people here might find it useful.
What it is: a local Flask app + curated catalog that aggregates samples from public research collections (theZoo, VX-Underground, MalwareBazaar, InQuest, javascript-malware-collection) into one searchable index, instead of jumping between a dozen repos.
What's different from just cloning the sources separately:
- 80 historical families, deduplicated — variants/rebrands of the same malware (Petya/NotPetya/GoldenEye/Satana) collapsed into one entry with timeline, attribution and impact, instead of showing up as 5 separate hits
- Every sample auto-encrypted (zip + infected password) on ingestion — zero raw executables ever touch disk unencrypted
- A fuzzy-matching indexer that links loose sample files to catalog entries by name/alias, with guards against false positives
- Grows via MalwareBazaar's official API (verified hash, not random "index of /" scraping)
- Bilingual (ES/EN), fully local — nothing served over the network by default
Repo: https://github.com/darama22/Malware-Research-Hub
Feedback welcome, especially on the family-deduplication logic — that was the hardest part to get right without over- or under-merging variants.
u/Connect-Winter-3977 — 13 days ago
