VGT Researchlab · Open Source · AGPLv3
☠
KillerDom
Apex Threat Annihilation Engine.
Brutale WAF-Signaturen. Vier Sprachen. Ein Zweck.
PHP · Python · Go · Rust — ReDoS-immun. Zero Cloud. No mercy.
What is KillerDom
No tutorial.
No playfulness.
KillerDom operiert mit maximaler Aggression und null Kontext-Bewusstsein. Es ist nicht geeignet für WordPress, Laravel, Drupal oder andere CMS-Plattformen — es wird sie unbrauchbar machen. KillerDom ist für statische Seiten, einfache APIs und Microservices konzipiert, wo legitimer Traffic vollständig vorhersehbar ist.
TIER 01
Critical
ABSOLUTE ANNIHILATION
- RCE / SSTI / Deserialization — PHP Chains, Log4Shell, Java/Node
- LFI / RFI / Path Traversal — Null-Bytes, PHP-Wrapper, /etc/passwd
- SQLi / NoSQLi — UNION SELECT, Time-Based, MongoDB Operators
- XSS / DOM Clobbering — HTML5, JSFuck, Event-Handler, srcdoc
- XXE / SSRF — Cloud Metadata, gopher://, AWS env
- Infrastructure Probes — .env, .git, wp-config.php, .aws/credentials
TIER 02
Suspicious
BEHAVIORAL ANALYSIS
- Obfuscation — base64_decode(eval(...)), gzinflate, str_rot13
- File Operations — fopen, file_put_contents, chmod in Payloads
- Hex / URL Encoding Chains — 4+ consecutive xNN Sequences
- High Entropy Shells — 6+ Shell-Metacharacter Clusters
- Cryptominer Signatures — coinhive, cryptonight, stratum+tcp
TIER 03
Header
SCANNER & BOTNET CATALOG
- 100+ known malicious User-Agents
- sqlmap, nikto, wpscan, nuclei, ffuf, gobuster
- masscan, zgrab, hydra, w3af, arachni, shodan
- burp, acunetix, nessus, dirbuster, nmap
- Log4Shell & critical Header Injections
Implementations
Four languages.
A weapon.
PHP
Atomic Groups + Possessive Quantifiers
Physically no backtracking possible. Atomic Groups (?>...) and possessive quantifiers prevent ReDoS at engine level.
killerdomphp.php → PHP CPython 3.11+Python
ASGI Middleware · FastAPI / Starlette
Native Atomic Groups from Python 3.11. Drop-in ASGI Middleware — every request scans headers, query, and body.
killerdompython.py → PY RE2 DFAGo
net/http Middleware · Zero Dependencies
RE2 Engine — Backtracking is architecturally excluded. O(n) guaranteed by the automaton itself. Zero external Dependencies.
killerdomgo.go → GO RegexSet DFARust
Simultaneous DFA · once_cell Static Engine
All patterns in a single automaton pass. RegexSet compiles all signatures into a DFA — the fastest implementation of the suite.
killerdomrust.rs → RSReDoS Immunity
Backtracking is
not an attack vector.
STANDARD REGEX · DANGEROUS
O(2ⁿ)
Exponential backtracking. A deliberately crafted payload can cause the CPU to spike to 100% and hold it there — classic ReDoS attack.
KILLERDOM · IMMUNE
O(n)
Atomic groups, possessive quantifiers (PHP/Python) and DFA engines (Go/Rust) make backtracking physically or architecturally impossible.
Open Source · AGPLv3
Support the project
KillerDom is free and open source — from the VGT Researchlab for everyone who wants to build something from it. If you want to support the project:
BTC: bc1q3ue5gq822tddmkdrek79adlkm36fatat3lz0dm
ETH/USDT: 0xD37DEfb09e07bD775EaaE9ccDaFE3a5b2348Fe85