performing-graphql-security-assessment - Performing GraphQL Security Assessment
Assess GraphQL APIs for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Discover GraphQL endpoints
- Fingerprint GraphQL engines
- Extract GraphQL schemas
- Test authorization controls
- Test injection vulnerabilities
- Assess denial-of-service protections
- Test authentication bypasses
Inputs
- GraphQL API endpoints
- Written testing authorization
- Authorization tokens
- GraphQL field wordlist
- Target application details
Outputs
- GraphQL schema files
- GraphQL query responses
- Schema visualizations
- Security assessment findings
Requirements
- Authorized security testing
- Burp Suite Professional
- InQL extension
- GraphQL Voyager
- InQL Scanner
- Altair GraphQL Client
- clairvoyance
- curl
- jq