Stuxnet

Stuxnet is widely recorded as the first malware written to break physical machinery. It went after Siemens Step 7 and S7-300 and S7-400 controllers, rewriting OB1 and OB35 block logic to push centrifuge frequency converters outside their safe range. This repository rebuilds that code module by module from the decompiled 2010 samples: the loader, the Win32k privilege escalation path, the s7otbxdx and s7aaapix hook libraries, and the mrxcls and mrxnet kernel rootkits each sit apart. Propagation is laid out as well, from the LNK exploit on USB drives to print spooler network shares to peer to peer. The author states that the build runs on Windows XP and Windows 7 only and that the purpose is malware analysis training and defensive research, released under GPLv3.