GraphQL Automated Vulnerability Scanner

Hey y’all,

Posting a tool I made recently to help out going through GraphQL endpoints with introspection enabled. It will grab the schema and go through and check if mutation is enabled, write access pretty much, if there are any sensitive queries, such as listing user details and files, and then it will test queries that it finds with little to no arguments to see if it requires authorization. Following all this it will rate give it a criticality score …

automated cybersecurity graphql scanner vulnerability vulnerability scanner