Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

Veil 3.1.X (Check version info in Veil at runtime)

Loki - Simple IOC and Incident Response Scanner

The project where literally anything* goes.

Veil Evasion is no longer supported, use Veil 3.0!

VirusTotal Wanna Be - Now with 100% more Hipster

ClamAV Development - FAQ is here: https://github.com/Cisco-Talos/clamav-faq

Undetectable Windows Payload Generation

windows kernel security development

Python antivirus evasion tool

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Modular file scanning/analysis framework

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

Antivirus evasion project

Malware (Analysis | Scoring System)

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

PHP-based anti-virus anti-trojan anti-malware solution.

TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Armadito antivirus main repository

Research on Anti-malware and other related security solutions

Sandboxed, Rust-based, Windows Defender Client

This package, written in php, can scan PHP files and analyze your project for find malicious code inside it. It provides a text terminal console interface to scan files in a given directory and find PHP code files the seem to contain malicious code.

List of real-world threats against endpoint protection software