πA cutting edge context aware GraphQL API fuzzing tool!
β173Oct 23, 2026Updated last week
Alternatives and similar repositories for GraphQLer
Users that are interested in GraphQLer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- πΈοΈ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. πΈοΈβ229May 22, 2023Updated 3 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.β48Sep 20, 2024Updated 2 years ago
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a pβ¦β31Jul 23, 2026Updated 3 months ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).β163Mar 31, 2025Updated last year
- Looks for parameters in urlsβ35Oct 14, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Command line interface for Jsmon Security Platformβ33Jul 31, 2026Updated 3 months ago
- Chrome extension for automating CSPT discoveryβ165Updated this week
- GQLSpection - parses GraphQL introspection schema and generates possible queriesβ108Mar 6, 2025Updated last year
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!β22Aug 25, 2024Updated 2 years ago
- jxscout superpowers JavaScript analysis for security researchersβ468Apr 12, 2026Updated 6 months ago
- β29Jul 14, 2023Updated 3 years ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScriptβ1,961May 22, 2024Updated 2 years ago
- JS Enumeration & SASTβ28Oct 22, 2026Updated last week
- Mutation-guided mutation-based fuzz testingβ53Jul 13, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokensβ173Nov 29, 2024Updated last year
- Security Auditor Utility for GraphQL APIsβ697Nov 20, 2025Updated 11 months ago
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-factoβ¦β42Apr 23, 2024Updated 2 years ago
- Blazing fast GraphQL discovery & fingerprinting toolbox.β135Nov 21, 2023Updated 2 years ago
- Obtain GraphQL API schema even if the introspection is disabledβ1,548Dec 5, 2025Updated 10 months ago
- Attacking indiscriminately every header, cookie, GET and POST parameter with blind fury.β12Sep 25, 2025Updated last year
- Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/oβ¦β910Updated this week
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.β171Jul 2, 2024Updated 2 years ago
- Linux CS bypass techniqueβ34Feb 4, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Fast and customizable vulnerability scanner For JIRA written in Pythonβ345Dec 31, 2024Updated last year
- GitHub Workflows Insightsβ47Jun 27, 2026Updated 4 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.β49Mar 4, 2024Updated 2 years ago
- β11Jun 8, 2021Updated 5 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable β¦β760Jul 10, 2026Updated 3 months ago
- Generate datasets of cloud audit logs for common attacksβ246Updated this week
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.β206Aug 5, 2024Updated 2 years ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practisβ¦β1,718May 24, 2025Updated last year
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.β881Updated this week
- Proton VPN Special Offer - Get 70% off β’ AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Dump Microsoft Recall data and imagesβ14Jun 7, 2024Updated 2 years ago
- A streamlined tool for discovering private TLDs for security research.β327Updated this week
- Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.β184Mar 5, 2026Updated 7 months ago
- Ansible role for Burp Suiteβ11Oct 8, 2026Updated 3 weeks ago
- β194Apr 16, 2025Updated last year
- These are the scripts & methodologies that can be used in Buffer Over Flow Fuzzing and Exploitationβ18Oct 3, 2021Updated 5 years ago
- Simple grammar-based test case generatorβ48Oct 19, 2026Updated last week