Andre Baptista recommends InQL for GraphQL endpoints to parse introspection, generate queries, and batch test attacks, and suggests pairing it with graphql-voyager to visualize schemas and map attack surface.
If you're up against a GraphQL endpoint, InQL is great.
Introspection parsing, query generation, batch attack testing.
It can map the entire attack surface of a GraphQL API.
Works as a Burp extension or standalone CLI.
You can also pair it with graphql-voyager for visual schema
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security