objc-rate-limiting-dos-audit

You can scan for denial-of-service vulnerabilities in Objective-C by running a static analysis script that checks network handlers, WebSocket endpoints, and file operations for unbounded loops and missing rate limits.

Common resource exhaustion patterns in Objective-C include unbounded loops, excessive memory allocation, unbounded collections, missing rate limits on network endpoints, and resource leaks under load.

Yes, you need the ripgrep command-line tool installed. The static analysis scripts require ripgrep to efficiently search Objective-C source files for resource exhaustion and denial-of-service vulnerabilities.

Yes, you can automatically flag missing rate limits on WebSocket endpoints. The audit specifically targets WebSocket endpoints, network handlers, and file operations to identify missing rate limits and DoS risks.

The best way to check an Objective-C network API for DoS risks before deployment is to run a targeted static analysis audit focusing on network handlers to quickly flag unbounded loops, excessive memory allocation, and missing rate limits.

Your rate limiting audit script likely fails because the 'rg' (ripgrep) command-line tool is not installed or accessible in your environment's PATH. The static analysis scanning requires ripgrep for efficient searching.