killer 2.0.0

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

# Built-in Killer suite: common web vulnerabilities.
suite "Web" {

    attack reflected_xss {
        request POST "/search"
        send { q = "hello" }
        mutate q {
            xss
        }
        expect {
            response does_not_contain "<script>"
        }
        severity high
        message: "Reflected XSS: script payload echoed back"
    }

    attack path_traversal {
        endpoint "/download"
        payload: "../../etc/passwd"
        expect {
            file_not_exposed true
        }
        severity high
        message: "Path traversal exposes server files"
    }
}