catastrophic-backtracking

Find every regex in a codebase, and report which can be driven into catastrophic backtracking

Will it ReDoS? Finds the regexes in your code that one malicious input can hang your server with — and prints the exact evil string that does it. Parses, detects exponential/polynomial backtracking, proves it with a live timing. npx will-it-redos scan .

Meet one of the longest regexes ever made!

ReDoS (catastrophic-backtracking) regex safety check

Watch your regex melt down: an interactive in-browser visualizer for catastrophic backtracking (ReDoS).

A curated, machine-readable, self-verifying catalogue of real-world ReDoS (regex denial-of-service) vulnerabilities — real regex, runnable attack, the fix, and CI-measured proof of the blow-up.

Browser-based ReDoS checker. Detects catastrophic-backtracking patterns and synthesizes evil inputs to demonstrate the worst case.