GraphQL security workshop labs
☆124Jan 31, 2026Updated 9 months ago
Alternatives and similar repositories for graphql-security-labs
Users that are interested in graphql-security-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable SAML infrastructure training applicaiton☆57Feb 2, 2023Updated 3 years ago
- Practice hacking JWT tokens☆118Sep 8, 2022Updated 4 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- a vulnerable GraphQL application☆20Dec 13, 2019Updated 6 years ago
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆56Oct 29, 2020Updated 6 years ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,719May 24, 2025Updated last year
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- Nuclei templates written by Blaze Information Security☆10Dec 28, 2021Updated 4 years ago
- ☆44Jul 23, 2021Updated 5 years ago
- Hidden parameters discovery suite☆221Nov 14, 2022Updated 3 years ago
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- A simple web app with a XXE vulnerability.☆230Nov 10, 2021Updated 4 years ago
- A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in☆19Dec 22, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- stdin writes to slack☆12Feb 8, 2020Updated 6 years ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆35Feb 12, 2022Updated 4 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆21Jul 31, 2021Updated 5 years ago
- VulnerAIble/VulnAI - Deploy your own vulnerable AI application and learn how to secure it.☆11Jul 21, 2025Updated last year
- Tips For Bug Bounty Hunters☆85Jul 16, 2022Updated 4 years ago
- GraphQL automated security testing toolkit☆335Feb 20, 2024Updated 2 years ago
- Use regular expressions to get sensitive information from a given repository (GitHub, pip or npm).☆37Sep 30, 2019Updated 7 years ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆95Jun 11, 2023Updated 3 years ago
- Find subdomains on GitLab.☆106Apr 28, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- NSE Script for GraphQL Introspection Check☆26Jan 9, 2022Updated 4 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Sep 29, 2026Updated last month
- graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…☆914May 16, 2026Updated 5 months ago
- A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.☆31Jul 30, 2024Updated 2 years ago
- web cache poison - Top 1 web hacking technique of 2019☆25Feb 24, 2020Updated 6 years ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆425Dec 24, 2022Updated 3 years ago
- Create your own recon & vulnerability scanner with Trickest and GitHub☆47Sep 25, 2023Updated 3 years ago
- ☆32Jun 23, 2021Updated 5 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Research on GraphQL from an AppSec point of view.☆416May 24, 2023Updated 3 years ago
- ☆52Aug 27, 2020Updated 6 years ago
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- ☆36Aug 27, 2022Updated 4 years ago
- GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)☆1,696Mar 11, 2024Updated 2 years ago
- Make exploiting race conditions in web applications highly efficient and ease-of-use.☆26Jun 18, 2025Updated last year
- An advanced JWT extraction & decoding tool for bug bounty hunters! 🏴☠️☆45Mar 24, 2025Updated last year