killer 2.0.1

A Rust security platform: static analysis, the .klr test language, a parallel test framework, project intelligence, code review, and a CI gate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

//! Built-in security test suites, embedded in the binary at compile time.
//!
//! `killer test --suite <name>` runs one of these without needing any `.klr`
//! files in the project. They are ordinary `.klr` source, parsed and executed
//! by the same runtime as user suites.

/// A built-in suite: its short name and embedded `.klr` source.
pub struct BuiltinSuite {
    pub name: &'static str,
    pub description: &'static str,
    pub source: &'static str,
}

const SUITES: &[BuiltinSuite] = &[
    BuiltinSuite {
        name: "authentication",
        description: "Login bypass, brute-force, and protected-route checks.",
        source: include_str!("../suites/authentication.klr"),
    },
    BuiltinSuite {
        name: "web",
        description: "Reflected XSS and path traversal.",
        source: include_str!("../suites/web.klr"),
    },
    BuiltinSuite {
        name: "api",
        description: "Input-injection fuzzing and rate limiting.",
        source: include_str!("../suites/api.klr"),
    },
    BuiltinSuite {
        name: "database",
        description: "SQL-injection fuzzing and error-leak checks.",
        source: include_str!("../suites/database.klr"),
    },
    BuiltinSuite {
        name: "crypto",
        description: "Secret and private-key exposure checks.",
        source: include_str!("../suites/crypto.klr"),
    },
    BuiltinSuite {
        name: "filesystem",
        description: "Path-traversal and file-exposure checks.",
        source: include_str!("../suites/filesystem.klr"),
    },
];

/// Look up a built-in suite by name (case-insensitive).
pub fn get(name: &str) -> Option<&'static BuiltinSuite> {
    let name = name.trim().to_ascii_lowercase();
    SUITES.iter().find(|s| s.name.eq_ignore_ascii_case(&name))
}

/// All built-in suites.
pub fn all() -> &'static [BuiltinSuite] {
    SUITES
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::klr::parse;

    #[test]
    fn all_builtin_suites_parse() {
        for suite in all() {
            let program = parse(suite.source)
                .unwrap_or_else(|e| panic!("suite {} failed to parse: {e}", suite.name));
            assert!(
                !program.suites.is_empty() || !program.attacks.is_empty(),
                "suite {} has no tests",
                suite.name
            );
        }
    }

    #[test]
    fn lookup_is_case_insensitive() {
        assert!(get("AUTHENTICATION").is_some());
        assert!(get("web").is_some());
        assert!(get("nonexistent").is_none());
    }
}