killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

# Built-in Killer suite: database injection and error handling.
suite "Database" {

    attack sql_injection_fuzz {
        request POST "/api/query"
        send { q = "1" }
        fuzz q
        check injection
        severity high
        message: "A query parameter is injectable"
    }

    attack error_not_leaked {
        request POST "/api/query"
        send { q = "'" }
        expect {
            response does_not_contain "SQL syntax"
            response does_not_contain "syntax error"
        }
        severity medium
        message: "Database errors leak to clients"
    }
}