Obtain GraphQL API schema even if the introspection is disabled
GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
The main features of swisskyrepo/graphqlmap are: Fuzzing Tools, GraphQL Injection, GraphQL Security Tools.
Open-source alternatives to swisskyrepo/graphqlmap include: nikitastupin/clairvoyance — Obtain GraphQL API schema even if the introspection is disabled. assetnote/batchql — GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. doyensec/inql — InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability… brendan-rius/c-jwt-cracker — JWT brute force cracker written in C. bo0om/parampampam — This tool for brute discover GET and POST parameters. assetnote/kiterunner — Contextual Content Discovery Tool.