killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

# Examples

Runnable `.klr` files live in [`examples/`](../examples/) and the built-in
suites in [`suites/`](../suites/). This page annotates a few.

## Authentication (SQL injection + rate limit)

[`examples/auth_security.klr`](../examples/auth_security.klr)

```klr
project "MyApplication"

attack authentication {
    target "/api/login"
    send {
        username = "' OR 1=1"
        password = "anything"
    }
    expect {
        status != 200                       # login must be rejected
        response does_not_contain "token"   # and no session token leaked
    }
    severity critical
    message: "SQL injection vulnerability detected"
}
```

```sh
killer test examples/auth_security.klr --url http://localhost:8080
```

## Fuzzing an API input

```klr
suite "API" {
    attack input_injection {
        request POST "/api/item"
        send { id = "1" }
        fuzz id          # expands into many variants, run in parallel
        check injection  # no SQL error may leak
        severity high
    }
}
```

```sh
killer test api.klr --url http://localhost:8080 --parallel
```

## A static code rule

[`examples/database_rules.klr`](../examples/database_rules.klr)

```klr
rule "unsafe database query"
when function contains "query"
and input reaches query
without sanitization
severity high
report: "User input reaches database directly"
```

```sh
killer test examples/database_rules.klr --project .
```

## Built-in suites (no file needed)

```sh
killer test --suite web            --url http://localhost:8080
killer test --suite api            --url http://localhost:8080 --parallel
killer test --suite authentication --url http://localhost:8080
```

## CI gate

```sh
killer ci --base origin/main   # scan + rules + review; non-zero exit on findings
killer github enable           # generate .github/workflows/killer.yml
```