catastrophic-backtracking

Find every regex in a codebase, and report which can be driven into catastrophic backtracking

Will it ReDoS? Finds the regexes in your code that one malicious input can hang your server with — and prints the exact evil string that does it. Parses, detects exponential/polynomial backtracking, proves it with a live timing. npx will-it-redos scan .

Meet one of the longest regexes ever made!

ReDoS (catastrophic-backtracking) regex safety check

Browser-based ReDoS checker. Detects catastrophic-backtracking patterns and synthesizes evil inputs to demonstrate the worst case.