GraphQLmap - a scripting engine to interact with a graphql endpoint for pentesting purposes.

May 10, 2021
(724 views)

Original repository: https://github.com/swisskyrepo/GraphQLmap#install

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

  • Install
  • Features and examples
    • Dump a GraphQL schema
    • Interact with a GraphQL endpoint
    • Execute GraphQL queries
    • Autocomplete queries
    • GraphQL field fuzzing
    • NoSQL injection inside a GraphQL field
    • SQL injection inside a GraphQL field

heart pull requests, feel free to improve this script :)

You can also contribute with a beers IRL or using Github Sponsoring button.

Install

$ git clone https://github.com/swisskyrepo/GraphQLmap
$ python graphqlmap.py                                                              
   _____                 _      ____  _                            
  / ____|               | |    / __ \| |                           
 | |  __ _ __ __ _ _ __ | |__ | |  | | |     _ __ ___   __ _ _ __  
 | | |_ | '__/ _` | '_ \| '_ \| |  | | |    | '_ ` _ \ / _` | '_ \ 
 | |__| | | | (_| | |_) | | | | |__| | |____| | | | | | (_| | |_) |
  \_____|_|  \__,_| .__/|_| |_|\___\_\______|_| |_| |_|\__,_| .__/ 
                  | |                                       | |    
                  |_|                                       |_|    
                                         Author:Swissky Version:1.0
usage: graphqlmap.py [-h] [-u URL] [

Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Inline Feedbacks
View all comments
© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023
What certifications or qualifications do you hold?
Max. file size: 150 MB.

What level of experience should the ideal candidate have?
What certifications or qualifications are preferred?

Download Free eBook

Step 1 of 4

Name(Required)

We’re committed to your privacy. Hakin9 uses the information you provide to us to contact you about our relevant content, products, and services. You may unsubscribe from these communications at any time. For more information, check out our Privacy Policy.