Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

As the best way to learn is to read the code, do you know where I can find malware/virus/whatever source code to read?

share|improve this question

closed as off-topic by Jens Erat, Begueradj, Stephane, Deer Hunter, AviD Oct 2 at 9:57

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

4 Answers 4

up vote 12 down vote accepted

Update: I added the link below after a reading a twitter message
"Links and resources for malware samples"

Malware specific:

If you have money:
Free (and paid):

"The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database." is another one

share|improve this answer
These are exploit, advisory and vulnerable apps repositories, there are no malware samples as I know. – anonymous Nov 14 '10 at 11:07
I may have taken the ‘whatever source’ from the question too liberally – I added a couple malware specific resources, thanks! – Tate Hansen Nov 15 '10 at 3:36
1 does not offer any malware source code. It only list vulnerabilities of known 'innocent' and widely used softwares. – Begueradj May 6 '14 at 15:00

Here are different samples of malware: Also, you can setup honeypot (like this: to collect samples on your own.

share|improve this answer

If you're willing to contribute back, set your machine with Dionaea honeypot and enable XMPP support. You could leech malware from your friends out there.

Also, if you extend a bit your Dionaea config and apply for "freelance" account with you could get access to their bulky malware repositories and automatically download Windows malwares as you wish.

Milla's (contagiodump) blog is pretty good too. Recently she did update her blog with Mobile malware.

share|improve this answer

The SecurityFocus website often has exploit code for vulnerabilities reported there.

share|improve this answer
SecurityFocus has been known to manipulate exploits so they no-longer compile and/or run. – ewanm89 Jul 17 '12 at 0:15

Not the answer you're looking for? Browse other questions tagged or ask your own question.