Bypassing antivirus detection: old-school malware, new tricks

• Updated May 10, 2023
• C++

The provided Python program, Nim-Backdoor.py, generates a Nim program that operates as a backdoor, allowing remote command execution via a netcat-like session. This tool is designed to work on both Linux and Windows systems. Notably, it has been engineered to bypass popular antivirus software such as Microsoft Defender, Bitdefender, and Kaspersky.

• Updated Jul 18, 2024
• Python

Kaspersky Security Center: custom decoders and rules for Wazuh SIEM

• Updated Aug 16, 2024

Malice Kaspersky Antivirus Plugin

• Updated Feb 10, 2019
• Go

go-ksc is a Go client library for accessing the KSC (Kaspersky) Open API.

• Updated Jan 30, 2022
• Go

Kaspersky Security Center monitoring helper

• Updated Oct 8, 2021
• PowerShell

CSV parser for the password file exported by Kaspersky Password Manager

• Updated Mar 18, 2022
• Go

Python tool that applies Sigma rules to Kaspersky EVTX logs.

• Updated Aug 12, 2025
• Python

Program for parsing KSC installed software report

• Updated Feb 28, 2019
• C#

Malware sandbox for automated PE/ELF analysis with EDR integration and behavioral monitoring. Open-source alternative to CAPE sandbox.

• Updated Oct 27, 2025
• Python

I've glued Kaspersky's troubleshooting tools together into one PowerShell script.

• Updated Oct 18, 2018
• PowerShell

Kaspersky SC Add-on for Splunk

• Updated Sep 17, 2025

Sysdiagnose is a utility on most Apple devices that can be used to gather system-wide diagnostic information. It includes logging from different services and reports on the state of systems. What is contained in a sysdiagnose will vary depending on what type of device and which version of the macOS, iOS, iPadOS, tvOS, watchOS and visionOS.

• Updated Mar 8, 2024
• Python

Simple script to dexor Kaspersky Quarantine Files

• Updated Jan 12, 2026
• Python

This script takes Kaspersky Password Manager's text output file, reformats the account and password information, strips unnecessary data, and re-writes it as a comma-separated-value file that KeePassXC can read.

• Updated Oct 18, 2024
• Python

(Unofficial) Script to convert and push Kaspersky APT IoC IP Data Feeds to MISP (Malware Information Sharing Platform)

• Updated Sep 23, 2019
• Python

Kaspersky SC App for Splunk

• Updated Apr 8, 2024

Research work at BMSTU on "Network operating systems"

• Updated Feb 1, 2023
• TeX

This repository is a collection of tools for the usage of Bitwarden

• Updated May 10, 2024
• Python

A Python CLI tool that reads file hashes from a text file and checks their reputation using the Kaspersky Threat Intelligence Portal (OpenTIP) API. The tool is designed for SOC analysts, incident responders, malware analysts, and penetration testers who need to enrich large hash datasets safely and reliably.

• Updated Feb 6, 2026
• Python