Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Astrid is a portable, capability-secure operating system for composable software.
Cloud Native Runtime Security
📱 objection - runtime mobile exploration
🚀 A fast WebAssembly interpreter and the most universal WASM runtime
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
A secure low code deception runtime framework, leveraging AI for System Virtualization.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
ebpfkit is a rootkit powered by eBPF
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Hush is a runtime configuration loader for Elixir applications
Mobile runtime detection workbench for AI (iOS and Android)
eBPF Security Monitoring and Sandboxing Agent Based on Aya
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.