Alternatives and similar repositories for poc-graphql:

Users that are interested in poc-graphql are comparing it to the libraries listed below

• assetnote / batchql
  GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
  ☆379Updated 2 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆325Updated 2 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆324Updated 4 months ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆298Updated 4 years ago
• nicholasaleks / graphql-threat-matrix
  GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations
  ☆302Updated last year
• daeken / SSRFTest
  SSRF testing tool
  ☆245Updated 2 years ago
• Regala / burp-scope-monitor
  Burp Suite Extension to monitor new scope
  ☆197Updated 3 years ago
• fcavallarin / domdig
  DOM XSS scanner for Single Page Applications
  ☆402Updated 7 months ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆300Updated 2 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆122Updated 2 years ago
• mazen160 / jwt-pwn
  Security Testing Scripts for JWT
  ☆312Updated 2 years ago
• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆606Updated 3 months ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆427Updated 2 weeks ago
• doyensec / burpdeveltraining
  Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
  ☆349Updated 4 years ago
• cablej / FileChangeMonitor
  Continuous monitoring for JavaScript files
  ☆219Updated 5 years ago
• ArturSS7 / TukTuk
  Tool for catching and logging different types of requests.
  ☆220Updated 4 years ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆515Updated 2 years ago
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆258Updated 3 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆189Updated 4 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆204Updated last year
• NotSoSecure / cloud-service-enum
  ☆242Updated 8 months ago
• PortSwigger / inql
  InQL - A Burp Extension for GraphQL Security Testing
  ☆38Updated last year
• andresriancho / mongo-objectid-predict
  Predict Mongo ObjectIds
  ☆127Updated 6 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆174Updated 2 years ago
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆527Updated 2 years ago
• defparam / h1passets
  List HackerOne private program assets
  ☆150Updated 3 years ago
• JuxhinDB / OOB-Server
  A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
  ☆188Updated 5 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆166Updated 5 years ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆285Updated last month
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆252Updated last year