Offensive Security

ReDoS-KILLER

Regular Expression DoS Scanner & Auto-Fixer

A single vulnerable regex can freeze production servers with catastrophic backtracking — and most scanners only lint syntax. ReDoS-KILLER analyzes actual regex complexity across your codebase to catch the patterns that cause real outages.

• Recursive project scanning for ReDoS-prone regex patterns
• Detects nested quantifiers, catastrophic backtracking, ambiguous repetition
• Optional auto-fix mode to remediate unsafe regexes
• Multiple output formats, CI/CD-friendly
• Works fully offline — no external dependencies or cloud calls
• Clean CLI, hardened detection logic