Awesome AI Agents › Runtime Analysis Tools
jrasp-agent is a Java Runtime Application Self Protection (RASP) system designed to provide runtime defense for Java Virtual Machine (JVM) applications. It operates by using Java Agent technology to modify Java bytecode, embedding security detection logic that can detect and block vulnerability attacks in real time. This makes it a powerful tool for enhancing the security posture of Java applications by preventing exploitation during runtime. The project supports customizable security plug-ins, allowing users to tailor detection logic to their specific needs. It features low latency in detection, hot update capabilities for plug-ins, and automatic injection into Java processes. It also supports native method hooks, such as command execution, to prevent bypassing security measures. The agent is compatible across major operating systems including Windows, macOS, and Linux, and is lightweight with a core jar package size of approximately 600KB. Performance-wise, jrasp-agent introduces a minimal overhead, increasing CPU usage by about 5% under normal request conditions and consuming less than 200MB of memory. It incorporates several self-security mechanisms such as plug-in and daemon hash verification, customized socket communication protocols with RSA encryption, and isolation of core functions via custom class loaders to protect against internal JVM attacks. Reflection reinforcement is also implemented to prevent malicious reflection attacks. The security modules cover a wide range of vulnerabilities including command execution, deserialization attacks, HTTP-related threats, XXE, file access, expression injection, SQL injection, JNDI injection, SSRF, and Shiro framework vulnerabilities. Additional modules under development include dangerous protocol detection, DNS query monitoring, memory protection, class loader security, and attach detection. The agent supports JDK versions from 6 upwards, with specific flags required for JDK 11 and above. Installation instructions are provided, and while the source code is not openly available due to security concerns, partners can access the basic framework source. The project is based on open-source projects like jvm-sandbox and open-rasp, and is licensed under LGPL3.0 for learning and personal use. Overall, jrasp-agent is a comprehensive and efficient runtime security solution for Java applications, focusing on real-time protection against a broad spectrum of vulnerabilities with minimal performance impact.
https://github.com/jvm-rasp/jrasp-agent
PrivateGPT is a fully private, offline-capable AI platform that enables users to interact with their documents using Large Language Models through a comprehensive API and user-friendly interface, ensuring data never leaves the user's environment.
PentAGI is a fully autonomous AI-driven penetration testing system that integrates professional security tools, multi-agent AI collaboration, and scalable microservices architecture to deliver comprehensive and automated security assessments.
Impacket is a Python library offering low-level programmatic access and implementations for various network protocols, focusing on security research and educational use.
VIPER is a versatile and powerful red team platform that supports adversary simulation and cybersecurity assessments across multiple operating systems, enhanced with AI-driven automation and extensive post-exploitation capabilities.
MCP-Scan is a security tool that statically and dynamically scans MCP connections to detect and prevent vulnerabilities like prompt injections, tool poisoning, and cross-origin escalations, offering real-time monitoring and customizable guardrails for enhanced protection.
OpenRecall is a fully open-source, privacy-focused digital memory tool that captures and makes searchable your digital history through screenshots, supporting Windows, macOS, and Linux with local data storage and advanced semantic search capabilities.
MCP server that exposes Cheat Engine memory reading, scanning, disassembly and debugging to AI agent clients through roughly 180 tools over a named pipe or TCP relay.
Amon is a modern, open-source server monitoring platform designed to help users track and manage server performance and uptime effectively.