killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# File-upload and session-management attacks.
# Run with:  killer test examples/upload_and_session.klr --url http://localhost:3000

project "MyApplication"

# Path traversal: uploading "../../etc/passwd" must not expose the file.
attack upload {
    endpoint "/upload"
    payload: "../../etc/passwd"
    expect {
        file_not_exposed true
    }
    severity high
    message: "Path traversal exposes server files"
}

# Session reuse: a stolen cookie should be rejected after logout/reuse.
attack session {
    target "/account"
    login user "test"
    steal cookie
    attempt reuse
    expect {
        session_invalidated true
    }
    severity high
    message: "Stolen session cookie is still accepted"
}