alexandreborges/malwoverview

Health v2 · maintenance only

Adoption not part of the score

4075 stars · 558 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Malwoverview is a Python command-line first-response tool for threat hunting that queries many threat intelligence sources such as VirusTotal, Hybrid Analysis, URLHaus, Malpedia, Malware Bazaar, Shodan, and AbuseIPDB. It supports IOC extraction, YARA scanning, LLM enrichment, CVE lookups, and Android malware analysis.

Use cases

• check a file hash against VirusTotal and other sandboxes
• extract IOCs from a suspicious file
• look up malicious IPs and domains from threat feeds
• search CVEs and vulnerability data for a first response
• run YARA rules against samples
• triage malware samples during incident response
• query whois and URL scan data for a suspicious link

When to choose

• you need a single CLI to query many threat intelligence APIs during triage
• you are doing first-response malware analysis or threat hunting from the terminal
• you want IOC extraction and enrichment without building custom integrations

When to avoid

• you need a full GUI malware analysis or reverse engineering suite
• you want a managed SIEM or continuous threat monitoring platform
• you lack API keys for the underlying intelligence services

Facets

cli-tool · maturity active

security osint search-engine developer-tools security penetration-testing osint windows python cli threat-hunting threat-intelligence malware-analysis ioc-extraction yara virustotal cve incident-response linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="alexandreborges/malwoverview")