redos

The trustworthy ReDoS checker

RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching

ADB manager for Android devices

A DFA regex engine in java.

A CLI and library which tests helps score how vulnerable a regex pattern is to ReDoS attacks. Supported in the browser, Node and Deno.

List of RegEx DoS (ReDoS) CVEs and resources

Static analysis, linter & logic solver for PHP regular expressions

🐀 Regular Expression Denial of Service analyzer.

A performance-focused ESLint plugin

An ESLint plugin that detects vulnerable regex using "https://github.com/tjenkinson/redos-detector".

VSCode extension to detect vulnerable regular expressions

A tiny, dependency-free regex engine for Go: guaranteed linear-time matching (no ReDoS), a fluent builder, and Explain() to describe any pattern in plain English.

A static analyzer to scan JavaScript code for problematic regular expressions.

A regular-expression (regex) library for Zig — a faithful, linear-time port of Go's regexp (RE2): proven byte-for-byte identical to Go across 30k differential tests, and ~11% faster.

Automaton-Free Regular Expression Library based on a New Algorithm

Commands to build docker RedOS image from installed RedOS server version

Cheats for OS RedOS/RedOS_Server

Fast, Unicode-aware regex engine for Zig — runtime & comptime, linear-time (ReDoS-safe), full \p{} properties & scripts, SIMD-accelerated. Zero-alloc matching, WASM-ready.

Linear-time, ReDoS-safe C++20 header-only regex engine with bounded lookarounds + an re-compatible Python binding

malstring is a lightweight Go library that detects malicious or unsafe strings such as SQL injection, command injection, XSS, path traversal, and other attack patterns. It provides fast, pattern‑based threat classification to help secure user input in web services, APIs, and backend applications.