Obtain GraphQL API schema even if the introspection is disabled
Trivy is a comprehensive security scanner designed to identify vulnerabilities and misconfigurations across container images, filesystems, and infrastructure as code files. It functions as a software composition analysis tool and an infrastructure security scanner, providing automated checks for CI/CD pipelines and cloud environments to ensure the integrity of the software supply chain. The tool distinguishes itself through a modular, plugin-based architecture that allows for the independent inspection of diverse targets. It utilizes a declarative policy engine to evaluate configurations agai
GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Las características principales de doyensec/inql son: Vulnerability Scanners, Application Security, GraphQL Injection, GraphQL Security, GraphQL Security Tools, Proxy Tool Extensions, Security and Auditing.
Las alternativas de código abierto para doyensec/inql incluyen: nikitastupin/clairvoyance — Obtain GraphQL API schema even if the introspection is disabled. dolevf/graphql-cop — Security Auditor Utility for GraphQL APIs. escape-technologies/graphinder — 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️. assetnote/batchql — GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. dstotijn/hetty — Hetty is an HTTP intercepting proxy and web security research toolkit used to capture, inspect, and modify traffic… aquasecurity/trivy — Trivy is a comprehensive security scanner designed to identify vulnerabilities and misconfigurations across container…