killer 2.0.1

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

# Built-in Killer suite: secret and key material exposure.
suite "Crypto" {

    attack no_private_key_leak {
        endpoint "/config"
        expect {
            response does_not_contain "PRIVATE KEY"
            response does_not_contain "BEGIN RSA"
        }
        severity critical
        message: "Private key material is exposed in a response"
    }

    attack no_secret_leak {
        endpoint "/debug"
        expect {
            response does_not_contain "api_key"
            response does_not_contain "secret"
        }
        severity high
        message: "Secrets are exposed via a debug endpoint"
    }
}