As the best way to learn is to read the code, do you know where I can find malware/virus/whatever source code to read?

4 Answers 4


Update: I added the link below after a reading a twitter message
"Links and resources for malware samples"

Malware specific:

If you have money: http://www.frame4.net/home
Free (and paid): http://www.offensivecomputing.net/


"The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database."

http://www.packetstormsecurity.org/ is another one

  • 2
    These are exploit, advisory and vulnerable apps repositories, there are no malware samples as I know.
    – anonymous
    Commented Nov 14, 2010 at 11:07
  • 1
    I may have taken the ‘whatever source’ from the question too liberally – I added a couple malware specific resources, thanks! Commented Nov 15, 2010 at 3:36
  • 1
    exploit-db.com does not offer any malware source code. It only list vulnerabilities of known 'innocent' and widely used softwares.
    – user45139
    Commented May 6, 2014 at 15:00

Here are different samples of malware: http://forums.malwarebytes.org/index.php?showforum=51. Also, you can setup honeypot (like this: http://code.mwcollect.org/projects/show/mwcollectd) to collect samples on your own.


If you're willing to contribute back, set your machine with Dionaea honeypot and enable XMPP support. You could leech malware from your friends out there.

Also, if you extend a bit your Dionaea config and apply for "freelance" account with http://alliance.mwcollect.org you could get access to their bulky malware repositories and automatically download Windows malwares as you wish.

Milla's (contagiodump) blog is pretty good too. Recently she did update her blog with Mobile malware.


The SecurityFocus website often has exploit code for vulnerabilities reported there.

  • 2
    SecurityFocus has been known to manipulate exploits so they no-longer compile and/or run.
    – ewanm89
    Commented Jul 17, 2012 at 0:15

Not the answer you're looking for? Browse other questions tagged .