How darama22/malware-research-hub works
Malware Research Hub is a local, bilingual forensic catalog and specimen browser. Researchers use the web UI to search and filter indexed specimen metadata, inspect family and timeline information, and open a specimen’s collection folder; the server exposes the catalog and resource capabilities. The indexer scans the collections tree to produce the search index. Separately, the MalwareBazaar downloader and collection integrator extend the corpus and reindex it. The README documents containment and additional catalog/resource features; app source was not included in the sampled files, so implementation details and uncertain wiring are omitted.
Main entry points: server.py Flask server · app.js Browser UI · indexer.py Catalog indexer · integrate_collections.py Collection integrator
Components 12
Web experience
- Browser UI
app/static/app.js - ES/EN text
app/static/i18n.js - Flask server
app/server.py
Catalog and indexing
- Forensic catalog
- Catalog indexer
app/indexer.py - Search index
- Research resources
app/server.py
Specimen corpus
- Specimen collections
collections
Corpus ingestion
- MalwareBazaar fetch
app/mb_download.py - Collection integrator
app/integrate_collections.py
Other components
- Researcher
- MalwareBazaar API
Connections 13
- Researcher → Browser UI: uses
- Browser UI → Flask server: requests
- Flask server → Browser UI: returns results
- Browser UI → ES/EN text: loads language
- Flask server → Forensic catalog: serves catalog
- Flask server → Search index: queries metadata
- Flask server → Research resources: serves resources
- Catalog indexer → Specimen collections: scans
- Catalog indexer → Search index: generates
- Researcher → Flask server: opens folder
- MalwareBazaar fetch → MalwareBazaar API: downloads by API
- Collection integrator → Specimen collections: integrates and encrypts
- Collection integrator → Catalog indexer: reindexes