killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

# Built-in Killer suite: API robustness and injection.
suite "API" {

    attack input_injection_fuzz {
        request POST "/api/item"
        send { id = "1" }
        mutate id {
            sql_injection
            negative_numbers
            huge_values
            empty
        }
        check injection
        severity high
        message: "API input reaches the backend unsafely"
    }

    attack rate_limit {
        request POST "/api/item"
        repeat 100 times
        expect blocked_after 30
        severity medium
        message: "API endpoint is not rate limited"
    }
}