Alternatives and similar repositories for graphql-cop:

Users that are interested in graphql-cop are comparing it to the libraries listed below

• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆611Updated 4 months ago
• nicholasaleks / graphql-threat-matrix
  GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations
  ☆302Updated last year
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆356Updated last year
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆327Updated 7 months ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆629Updated last year
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆191Updated 7 months ago
• Escape-Technologies / awesome-graphql-security
  A curated list of awesome GraphQL Security frameworks, libraries, software and resources
  ☆322Updated last year
• gsmith257-cyber / GraphCrawler
  GraphQL automated security testing toolkit
  ☆313Updated last year
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆607Updated last week
• Escape-Technologies / goctopus
  Blazing fast GraphQL discovery & fingerprinting toolbox.
  ☆108Updated last year
• Escape-Technologies / graphinder
  🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
  ☆210Updated last year
• assetnote / batchql
  GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
  ☆381Updated 2 years ago
• ngalongc / AuthzAI
  ☆166Updated 5 months ago
• nikitastupin / clairvoyance
  Obtain GraphQL API schema even if the introspection is disabled
  ☆1,147Updated 6 months ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆317Updated 2 months ago
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbit…
  ☆404Updated this week
• trufflesecurity / of-CORS
  ☆150Updated last year
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆166Updated last month
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆286Updated 4 months ago
• rs-loves-bugs / xsshunter
  ☆168Updated last month
• sysdig / wafer
  ☆198Updated 10 months ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆301Updated 4 months ago
• doyensec / GQLSpection
  GQLSpection - parses GraphQL introspection schema and generates possible queries
  ☆79Updated 3 weeks ago
• bebiksior / EvenBetter
  EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎
  ☆141Updated last week
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆234Updated last year
• redhuntlabs / BucketLoot
  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…
  ☆405Updated 2 months ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆285Updated 11 months ago
• trufflesecurity / xsshunter
  ☆428Updated 2 months ago
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆343Updated 3 years ago
• g0ldencybersec / CloudRecon
  ☆475Updated 11 months ago