10 open-source projects similar to nicholasaleks/graphql-threat-matrix, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Blazing fast GraphQL discovery & fingerprinting toolbox.
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
GraphQL Playground is an interactive development environment and API client used for writing, testing, and debugging GraphQL queries, mutations, and subscriptions. It functions as a visual tool for executing requests against a GraphQL server and inspecting the resulting JSON responses. The project includes a documentation browser for exploring schemas and an editor with autocompletion and error highlighting. It provides specialized capabilities for analyzing API performance through tracing visualization and supports real-time data updates via subscription streaming. The environment allows fo
Obtain GraphQL API schema even if the introspection is disabled
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)