runtime-security

There are 11 repositories under runtime-security topic.

Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-security api-testing apk cwe devsecops dynamic-analysis ios-security malware-analysis mastg masvs mobile-security mobsf mstg owasp rest runtime-security static-analysis web-security windows-mobile-security
Language:JavaScript 19751
falco
falcosecurity / falco
Cloud Native Runtime Security
cncf containers security falco ebpf kubernetes hacktoberfest cloud-native cncf-project runtime-security
Language:C++ 8372
aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
ebpf linux bpf security golang docker kubernetes runtime-security
Language:Go 4235
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
github-actions actions supply-chain-security hardening security-hardening runners egress-filtering network-security runtime-security
Language:TypeScript 909
Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
ebpf security rootkit linux linux-kernel linux-kernel-hacking runtime-security kernel
Language:C 809
OWASP / iGoat-Swift
OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
ios-security runtime-security insecure-data-storage ipa owasp-igoat owasp-top-10 ios-swift
Language:C 447
chriskaliX / Hades
Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)
agent hids golang ebpf netlink linux ebpf-sec runtime-security security ebpf-programs libbpf rust
Language:C 301
aquasecurity / traceeshark
Deep Linux runtime visibility meets Wireshark
epbf linux malware-analysis runtime-security security tracee tracing wireshark
Language:C 295
Gui774ume / ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
linux security kernel rootkit linux-kernel ebpf linux-kernel-hacking runtime-security
Language:C 137
willfindlay / bpfbox
🐝 BPFBox 📦 Exploring process confinement in eBPF
ebpf sandbox security linux linux-kernel runtime-security bcc
Language:C 105
kube-tarian / tarian
Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runtime processes monitoring, automated actions based on configure-actions, analytics, alerting and also sharing detections with community. Maybe save from Ransomware. Shift-Left your threat detection. Shift Right threat elimination.
devsecops microservices containers security security-tools security-hardening tarian cloudnative antivirus runtime-security anti-virus antivirus-software antimalware anti-malware kubernetes kubernetes-antimalware hacktoberfest kubernetes-security shiftleft ebpf
Language:Go 57
kubearmor / policy-templates
Community curated list of System and Network policy templates for the KubeArmor and Cilium
runtime-security kubearmor cilium system-policy network-policy kubernetes-policy
47
KubeDagger
yasindce1998 / KubeDagger
Kubernetes offensive framework built in eBPF
containers ebpf kubernetes linux linux-kernel linux-kernel-hacking malware rootkit runtime-security
Language:C 39
bombinisecurity / bombini
eBPF security monitoring agent based on Aya
aya bpf ebpf security kernel runtime-security
Language:Rust 33
pyrasp
rbidou / pyrasp
PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (AWS Lambda, Azure and Google Cloud Functions) and MCP Servers (FastMCP)
application-security rasp runtime-security aws-lambda azure-functions django fastapi flask gcp-cloud-functions fastmcp mcp mcp-servers security
Language:Python 32
Loginsoft-LLC / Linux-Exploit-Detection
Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma
ebpf exploit falco linux osquery runtime-security threat-hunting openpolicyagent rego cloudnative cve yara cloudsecurity vulnerability-management threat-intelligence vulnerability-intelligence threat-detection
Language:Open Policy Agent 21
listendev / action
Proactive security monitoring and threat detection in CI/CD
ci github-action npm supply-chain-security dynamic-analysis runtime-security
Language:TypeScript 15
falcosecurity / kernel-testing
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible ebpf falco firecracker ignite kernel runtime-security tests
Language:Dockerfile 13
listendev / jibril-releases
Jibril: A performant and low impact Linux runtime security tool agent.
ai-security ai-security-tool cicd cloud-native cnapp devsecops ebpf-co-re ebpf-programs iot iot-security k8s k8s-security runtime-security security-tools cndr
Language:Shell 13
0x41c / CeroClient
A Minecraft client injection platform with in-environment JVM object resolution against obfuscation.
client injection minecraft-mod passion-project proof-of-concept runtime-security
Language:C++ 6
ocalasans / dralyxor
Dralyxor: Advanced C++ header-only library for robust string obfuscation, shielding binaries from static/dynamic analysis. Uses a consteval micro-program engine with variable NOPs. Runtime anti-debug/tamper checks (canaries, content checksums) plus RAII "just-in-time" decryption ensure secure, minimal memory exposure of plain-text data.
cplusplus cpp header-only obfuscation string-obfuscation code-protection cybersecurity security kernel-mode memory-security reverse-engineering runtime-security user-mode string string-literals
Language:C++ 5
aessecurity / oburix
eBPF-based runtime agent for Endpoint Detection and Response for Linux based operating systems.
agent cybersecurity ebpf edr linux runtime-security xdr
Language:C 2
fhnw-imvs / fhnw-kubeseccontext
Keep your Kubernetes workloads in tune — secure and functional.
hardening kubernetes runtime-security security security-context
Language:Go 2
garnet-org / jibril-releases
Jibril releases (automated).
cnapp cwpp k8s-security runtime-security security edr
2
marvisvault / marvis-vault
Trust and compliance engine for AI agents — OSS CLI, SDK, and audit tools.
ai cli open-source oss sdk security ai-agents trust-infrastructure trust-in-ai compliance agentops policy-engine audit-logging runtime-security trustworthy-ai python3 security-tools
Language:Python 2
amir9339 / ebpf_maps_hooking
POC developed while writing the paper "A weakness in eBPF-based runtime security applications"
epbf evasion-attacks runtime-security
Language:C 1
gardener / gardener-extension-shoot-falco-service
Gardener extension controller to deploy Falco into shoot clusters.
falco gardener gardener-extension runtime-security kubernetes
Language:Go 1
nikhilnayak98 / csvs
CentOS based Docker Security Architecture
container-hardening container-security containerization docker docker-hardening docker-security linux-capabilities runtime-security seccomp selinux
Language:Shell 1
tigera-solutions / cc-aks-implement-runtime-security
In this AKS-focused workshop, you will work with Calico Cloud to learn how to implement runtime security to protect containers in your Kubernetes cluster from known and zero-day threats based container and network attacks running on Microsoft AKS.
aks azure calico calico-cloud cc regismartins runtime-security security
1
iamgp21 / capstone-runtime-sec
POC Repo for Implementing Runtime Security fo a Kubernetes Cluster.
kubernetes runtime-security observability cncf architecture cloud-security ebpf
Language:Go 0
marvisvault / .github
ai-agents open-source compliance trustworthy-ai runtime sdk cli trust-infrastructure audit-logging redaction runtime-security security security-tools python
0
akramIOT / mcp_server_agentic_tool
Github, Linear related MCP Server exposing a nuanced MCP Server Vulnerability at runtime
mcp-server mcp-server-security runtime-security vulnerability
Language:Python
bharats487 / cloud-native-security-platform
Comprehensive real-time security platform for Kubernetes-based cloud-native applications. Features runtime security monitoring, vulnerability scanning, compliance automation, and policy enforcement using OPA, Falco, Trivy, and Aqua Security.
aqua-security ci-cd cloud-native compliance dashboard devsecops falco kubernetes opa open-policy-agent policy-as-code runtime-security security trivy vulnerability-scanning
Language:JavaScript
bugsmirror / MASST
Bugsmirror MASST (Mobile Application Security Suite and Tools) is a comprehensive platform for end-to-end mobile application security. It offers threat detection tools for static, runtime, dynamic API testing and red teaming; robust app shielding solution for threat mitigation; threat visibility dashboard; & AI powered insight in a single platform.
anti-reverse-engineering anti-tampering api-security-testing app-shielding device-integrity dynamic-application-security-testing jailbreak-detection mobile-application-security mobile-application-security-testing redteaming root-detection runtime-application-self-protection runtime-security runtime-security-testing secure-communication static-application-security-testing threat-dashboard threat-detection-response threat-mitigation threat-monitoring
garnet-org / api
client and types for garnet platform
github-actions k8s-security runtime-security security github-actions-security
Language:Go
valtirman / treeline-core
ai-governance ecs fastapi firewall genai llm mitmproxy openai proxy runtime-security
Language:Shell

runtime-security

MobSF / Mobile-Security-Framework-MobSF

falcosecurity / falco

aquasecurity / tracee

step-security / harden-runner

Gui774ume / ebpfkit

OWASP / iGoat-Swift

chriskaliX / Hades

aquasecurity / traceeshark

Gui774ume / ebpfkit-monitor

willfindlay / bpfbox

kube-tarian / tarian

kubearmor / policy-templates

yasindce1998 / KubeDagger

bombinisecurity / bombini

rbidou / pyrasp

Loginsoft-LLC / Linux-Exploit-Detection

listendev / action

falcosecurity / kernel-testing

listendev / jibril-releases

0x41c / CeroClient

ocalasans / dralyxor

aessecurity / oburix

fhnw-imvs / fhnw-kubeseccontext

garnet-org / jibril-releases

marvisvault / marvis-vault

amir9339 / ebpf_maps_hooking

gardener / gardener-extension-shoot-falco-service

nikhilnayak98 / csvs

tigera-solutions / cc-aks-implement-runtime-security

iamgp21 / capstone-runtime-sec

marvisvault / .github

akramIOT / mcp_server_agentic_tool

bharats487 / cloud-native-security-platform

bugsmirror / MASST

garnet-org / api

valtirman / treeline-core