killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

# Built-in Killer suite: authentication security.
suite "Authentication" {

    test protected_requires_auth {
        endpoint "/account"
        check authentication
        severity high
        message: "Protected endpoint is reachable without authentication"
    }

    attack sql_login_bypass {
        request POST "/login"
        send {
            username = "' OR 1=1 --"
            password = "anything"
        }
        expect {
            status != 200
            response does_not_contain "token"
        }
        severity critical
        message: "SQL injection authentication bypass"
    }

    attack brute_force {
        request POST "/login"
        repeat 60 times
        expect blocked_after 20
        severity high
        message: "Login endpoint has no brute-force rate limiting"
    }
}