Show HN: Redosray – find ReDoS-vulnerable regexes and prove them, offline

Category: security

Tags: regex, security, static-analysis, redos, browser-based

Score: 6.0/10 (Innovation: 6, Technical: 6, Documentation: 4, Utility: 6)

Redosray is a browser-based tool that statically detects potentially ReDoS-vulnerable regular expressions and then confirms each finding with a timed execution proof, eliminating false positives. It runs entirely offline in the user's browser, making it a self-contained security diagnostic for regexe performance issues.

Target audience: backend developers, security engineers, devops

Repository: https://aurelio-nakamura.github.io/redosray/

View on Hacker News