Escape-Technologies / graphinder
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
☆197Updated last year
Related projects ⓘ
Alternatives and complementary repositories for graphinder
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.☆186Updated 3 months ago
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆329Updated last year
- ☆146Updated last year
- Blazing fast GraphQL discovery & fingerprinting toolbox.☆101Updated last year
- graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…☆579Updated last month
- ☆143Updated last month
- Security Auditor Utility for GraphQL APIs☆384Updated 2 months ago
- Prototype pollution scanner using headless chrome☆197Updated 2 years ago
- GraphQL automated security testing toolkit☆303Updated 9 months ago
- Discover new target domains using Content Security Policy☆383Updated this week
- GQLSpection - parses GraphQL introspection schema and generates possible queries☆72Updated 5 months ago
- Filter and enrich a list of subdomains by level☆193Updated last year
- De-clutter a list of URLs☆309Updated this week
- EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎☆135Updated 2 weeks ago
- A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…☆227Updated 2 years ago
- Distribute ordinary bash commands over many systems☆161Updated 2 years ago
- Generate tens of thousands of subdomain combinations in a matter of seconds☆254Updated last year
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆166Updated 6 months ago
- GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations☆288Updated 11 months ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆533Updated 11 months ago
- A tool to inspect and attack version 1 GUIDs☆206Updated 2 years ago
- List of fresh DNS resolvers updated daily☆106Updated last year
- CrackQL is a GraphQL password brute-force and fuzzing utility.☆315Updated 3 months ago
- ☆147Updated 4 months ago
- 🛠️ Workflows created by the community☆61Updated 4 months ago
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆178Updated 2 years ago
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆225Updated 10 months ago
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆169Updated 6 months ago
- A GraphQL enumeration and extraction tool☆128Updated last year
- Find endpoints on GitHub.☆189Updated last year