Xplo8E/graphql-security-faqs

contains usefull information i gathered while learning graphql(security)

graphql-security-faqs

contains usefull information i gathered while learning graphql(security), if i want to re-start graphql pentesting i use this as notes

Index

• Graphql Keywords

  • Queries

  • Mutations

  • Subscriptions

• Graphql Vulnerabilities

  • Injection attacks

  • Denial of service (DoS) attacks

  • Access control vulnerabilities

  • Lack of rate limiting

  • Poorly configured CORS headers

  • Lack of input validation

  • Batching attacks

TO DO (feel free to contribute)

• add blogs and videos
• cheat sheets
• tips
• tools (usage of tools in real websites to provide better understanding on using the tools)