11 repository-uri
Specialized utilities for auditing, fingerprinting, and testing GraphQL endpoints.
Explore 11 awesome GitHub repositories matching part of an awesome list · GraphQL Security Tools. Refine with filters or upvote what's useful.
GraphQL Playground is an interactive development environment and API client used for writing, testing, and debugging GraphQL queries, mutations, and subscriptions. It functions as a visual tool for executing requests against a GraphQL server and inspecting the resulting JSON responses. The project includes a documentation browser for exploring schemas and an editor with autocompletion and error highlighting. It provides specialized capabilities for analyzing API performance through tracing visualization and supports real-time data updates via subscription streaming. The environment allows fo
IDE for managing GraphQL workflows and interactive documentation.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Burp Suite extension for comprehensive GraphQL security testing.
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
Scripting engine for interacting with and pentesting GraphQL endpoints.
Obtain GraphQL API schema even if the introspection is disabled
Extracts GraphQL schemas even when introspection is disabled.
graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
Fingerprinting utility to identify underlying GraphQL server technologies.
Security Auditor Utility for GraphQL APIs
Security auditing utility for GraphQL API implementations.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Security middleware layer for Apollo and Yoga GraphQL servers.
GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
Auditing script for batch GraphQL queries and mutations.
GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations
Framework for researching security gaps in GraphQL implementations.
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Fast discovery of GraphQL endpoints via enumeration and analysis.
Blazing fast GraphQL discovery & fingerprinting toolbox.
Toolbox for rapid GraphQL discovery and server fingerprinting.