🔍A cutting edge context aware GraphQL API fuzzing tool!
☆162Mar 18, 2026Updated this week
Alternatives and similar repositories for GraphQLer
Users that are interested in GraphQLer are comparing it to the libraries listed below
Sorting:
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆30Nov 30, 2025Updated 3 months ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆154Mar 31, 2025Updated 11 months ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆227May 22, 2023Updated 2 years ago
- Chrome extension for automating CSPT discovery☆138Mar 9, 2026Updated last week
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated last year
- A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.☆48Aug 8, 2025Updated 7 months ago
- ☆29Feb 4, 2026Updated last month
- ☆18Jul 30, 2024Updated last year
- When good OAuth apps go rogue. Documents observed OAuth application tradecraft☆84Jan 30, 2026Updated last month
- Looks for parameters in urls☆34Oct 14, 2024Updated last year
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.☆203Aug 5, 2024Updated last year
- GQLSpection - parses GraphQL introspection schema and generates possible queries☆99Mar 6, 2025Updated last year
- ☆23Sep 20, 2024Updated last year
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆164Nov 29, 2024Updated last year
- ☆93Apr 29, 2024Updated last year
- Simple grammar-based test case generator☆40Mar 2, 2026Updated 2 weeks ago
- Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/o…☆900Mar 12, 2026Updated last week
- ☆30Jul 14, 2023Updated 2 years ago
- Blazing fast GraphQL discovery & fingerprinting toolbox.☆128Nov 21, 2023Updated 2 years ago
- Java archive implant toolkit.☆61Apr 20, 2025Updated 11 months ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆795Updated this week
- Simple PoC for demonstrating Race Conditions on Websockets☆54Sep 14, 2023Updated 2 years ago
- ☆12Jun 8, 2021Updated 4 years ago
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆43Nov 28, 2025Updated 3 months ago
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆113Jan 4, 2024Updated 2 years ago
- Modular web-application honeypot platform built using go and gin☆63May 8, 2024Updated last year
- FuzzBuilderEx is a system to build seed corpus and fuzzing executables using the test framework automatically.☆14Sep 6, 2022Updated 3 years ago
- Linux CS bypass technique☆32Feb 4, 2025Updated last year
- A research project to add some brrrrrr to Burp☆208Feb 16, 2026Updated last month
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆46Mar 4, 2024Updated 2 years ago
- Mutation-guided mutation-based fuzz testing☆51Jul 13, 2024Updated last year
- ☆192Apr 16, 2025Updated 11 months ago
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.☆163Jul 2, 2024Updated last year
- ☆17Jan 9, 2025Updated last year
- Generate datasets of cloud audit logs for common attacks☆235Mar 9, 2026Updated last week
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆54Jan 26, 2026Updated last month
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,782May 22, 2024Updated last year
- PackageSpy is a versatile command-line tool designed to simplify the process of searching for packages on two popular package managers☆22Jun 19, 2024Updated last year