A personal vault of resources, experiments, case studies, insights and lil madness into the world of malware analysis and reverse engineering.

MA & RE Madness is a curated, evolving collection of everything I explore in the fields of:

• 🦠 Malware Analysis
• 🛠️ Reverse Engineering
• 🔬 Static & Dynamic Binary Inspection
• 🧪 Behavioral Analysis
• 💻 Disassembly / Debugging
• 🧰 Tool Configs & Custom Scripts

This isn't a project—it's a reference lab, a playground, and a documentation trail for my learning and experiments.

How-To-Survive-MARE/
├── 📁 notes/                → My MARE Notes (University Course Notes)
├── 📁 homelabs/                → HomeLabs Setup & Installations (MUST)
├── 📁 static-analysis/         → Notes, tools, and case studies (strings, PE headers, disasm)
├── 📁 dynamic-analysis/        → Execution tracing, sandbox logs, API hooking
├── 📁 reverse-engineering/     → CrackMes, patching trials, function analysis
├── 📁 samples/                 → (Redacted) hashes or safe test binaries
├── 📁 tools/                   → Scripts, configs, automation helpers
├── 📁 investigations/          → Full investigations & malware flow deconstruction
├── 📁 resources/               → PDF's, Books, Documents, Papers, Pages, News, Related to Malware Analysis & Reverse Engineering
└── 📄 README.md

Most folders contain README.md or markdown logs with detailed notes per activity or experiment.

• 🧠 Use it as a reference guide if you're studying MARE
• 🔍 Browse case studies to learn real-world malware techniques
• 🛠️ Reuse scripts, automation snippets, or tool configs
• 📚 Keep track of your own learnings by forking/cloning this as a base repo

You’re on your own battle arsnel, but here’s what works best for me:

• OS: ⚙️ Windows FLARE VM / Linux (Kali or Ubuntu), REMnux
• Isolation: 🧱 VirtualBox / VMWare with snapshots (Mostly VMware)
• Tools:
  • 🐍 Python for scripting
  • 🔍 Ghidra / IDA Free
  • 🧬 x64dbg / OllyDbg
  • 📦 PEStudio, ProcMon, Wireshark
  • 📜 noVNC / sandbox for browser malware
  • 😎 lot etc.

• Introduction To Malware Analysis Youtube Video (Not Random Shit, But Actualyyy "USEFUL")

• @_JohnHammond
• @MalwareAnalysisForHedgehogs
• @OALABS
• @huskyhacks
• @jstrosch
• @c3rb3ru5d3d53c
• @lauriewired
• @HackerSploit

• Practical Malware Analysis (NoStarch Book)
• TCM - Practical Malware Analysis & Triage
• Windows Malware Analysis for Beginners - Udemy
• Malware Unicorn RE101 Workshop

• TheZoo
• Malwarebytes Glossary
• SentinelOne Cybersecurity Blog
• G Data Malware Blog
• Rick’s GitHub Security Notes
• malware-analysis-resources
• Malware, IR - Tools & Resources (GoogleDrive Link, Google Dorked, Opensource Content, Be Catious)
• Microsoft Learn: Windows Internals
• Microsoft Developer Blog - Old New Thing
• Microsoft API Archives (Usenet)
• Practical Security Analytics
• Astra Security Blog
• Safety Detectives Security Blog
• Kaspersky Cyber Threat Map

• FLARE-VM by Mandiant
• Enable gpedit.msc on Windows Home
• Jeremy Beaume's Malware Tools

• VX-Underground
• Malware Bazaar by Abuse.ch
• TheZoo Malware Repository (ytisf)
• GitHub Malware Samples
• Malware Traffic Analysis
• Hybrid Analysis

• Reverse Engineering StackExchange
• Awesome Malware Analysis Collection

• Remote Access Trojans Collection
• Stealer Malware Collection
• Worms & Payloads

Educational Use Only.
Any samples, websites, or links (if referenced) are strictly for educational purposes. Always analyze inside air-gapped, isolated environments, or use only for ethical purposes. Never execute unknown binaries on your host machine or infect other systems or for any malicious intent — this will be a very dangerous, illegal and highly punishable offense.

This repo grows organically—as I learn, break things, and document.
No fixed roadmap.

“To understand the enemy, you must become the enemy.” — Sun Tzu, The Art of War