47,133 repositories indexed
1–24 of 31 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
A lightweight WebAssembly runtime that is fast, secure, and standards-compliant
Secure, Fast, and Extensible Sandbox runtime for AI agents.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Astrid is a portable, capability-secure operating system for composable software.
Cloud Native Runtime Security
📱 objection - runtime mobile exploration
🚀 A fast WebAssembly interpreter and the most universal WASM runtime
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
A secure low code deception runtime framework, leveraging AI for System Virtualization.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
ebpfkit is a rootkit powered by eBPF
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Hush is a runtime configuration loader for Elixir applications