Alternatives and similar repositories for graphql-threat-matrix:

Users that are interested in graphql-threat-matrix are comparing it to the libraries listed below

• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆611Updated 3 months ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆436Updated last month
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆327Updated 7 months ago
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆356Updated last year
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆191Updated 7 months ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆626Updated last year
• assetnote / batchql
  GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
  ☆381Updated 2 years ago
• gsmith257-cyber / GraphCrawler
  GraphQL automated security testing toolkit
  ☆313Updated last year
• ngalongc / AuthzAI
  ☆166Updated 5 months ago
• PalindromeLabs / awesome-websocket-security
  Awesome information for WebSockets security research
  ☆261Updated 3 years ago
• doyensec / GQLSpection
  GQLSpection - parses GraphQL introspection schema and generates possible queries
  ☆79Updated 2 weeks ago
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆258Updated last week
• elttam / semgrep-rules
  ☆184Updated 4 months ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆166Updated last month
• Escape-Technologies / graphinder
  🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
  ☆210Updated last year
• trufflesecurity / of-CORS
  ☆150Updated last year
• resyncgg / ripgen
  Rust-based high performance domain permutation generator.
  ☆285Updated last year
• AethliosIK / reset-tolkien
  Unsecure time-based secret exploitation and Sandwich attack implementation Resources
  ☆134Updated 3 months ago
• optiv / mobile-nuclei-templates
  ☆402Updated 3 years ago
• PortSwigger / bambdas
  Bambdas collection for Burp Suite Professional and Community.
  ☆249Updated 2 weeks ago
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆374Updated 3 years ago
• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆152Updated 7 months ago
• bebiksior / EvenBetter
  EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎
  ☆141Updated this week
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆321Updated last month
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆364Updated 2 years ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆607Updated last week
• projectdiscovery / nuclei-action
  Vulnerability Scan with Nuclei
  ☆249Updated 4 months ago
• hakluke / bug-bounty-standards
  A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…
  ☆229Updated 3 years ago
• Escape-Technologies / goctopus
  Blazing fast GraphQL discovery & fingerprinting toolbox.
  ☆108Updated last year
• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆267Updated 11 months ago