Bypassing antivirus detection: old-school malware, new tricks

The provided Python program, Nim-Backdoor.py, generates a Nim program that operates as a backdoor, allowing remote command execution via a netcat-like session. This tool is designed to work on both Linux and Windows systems. Notably, it has been engineered to bypass popular antivirus software such as Microsoft Defender, Bitdefender, and Kaspersky.

Kaspersky Security Center: custom decoders and rules for Wazuh SIEM

go-ksc is a Go client library for accessing the KSC (Kaspersky) Open API.

Malice Kaspersky Antivirus Plugin

Kaspersky Security Center monitoring helper

kaspersky total security download — Kaspersky Total Security for Windows 11 & 10. Direct download, install steps and setup guide.

CSV parser for the password file exported by Kaspersky Password Manager

Python tool that applies Sigma rules to Kaspersky EVTX logs.

Malware sandbox for automated PE/ELF analysis with EDR integration and behavioral monitoring. Open-source alternative to CAPE sandbox.

Sysdiagnose is a utility on most Apple devices that can be used to gather system-wide diagnostic information. It includes logging from different services and reports on the state of systems. What is contained in a sysdiagnose will vary depending on what type of device and which version of the macOS, iOS, iPadOS, tvOS, watchOS and visionOS.

Analysis of the TJprojMain Executable Infector

Program for parsing KSC installed software report

Kaspersky SC Add-on for Splunk

I've glued Kaspersky's troubleshooting tools together into one PowerShell script.

This script takes Kaspersky Password Manager's text output file, reformats the account and password information, strips unnecessary data, and re-writes it as a comma-separated-value file that KeePassXC can read.

Simple script to dexor Kaspersky Quarantine Files

Research work at BMSTU on "Network operating systems"

Kaspersky SC App for Splunk

A Python CLI tool that reads file hashes from a text file and checks their reputation using the Kaspersky Threat Intelligence Portal (OpenTIP) API. The tool is designed for SOC analysts, incident responders, malware analysts, and penetration testers who need to enrich large hash datasets safely and reliably.