Screenshots
Example Usage
$ python3 graphql-cop.py -h
Usage: graphql-cop.py -t http://example.com -o json
Options:
-h, --help show this help message and exit
-t URL, --target=URL target url with the path - if a GraphQL path is not
provided, GraphQL Cop will iterate through a series of
common GraphQL paths
-H HEADER, --header=HEADER
Append Header(s) to the request '{"Authorization":
"Bearer eyjt"}' - Use multiple -H for additional
Headers
-o FORMAT, --output=FORMAT
json
-e EXCLUDED_TESTS, --excluded-tests=EXCLUDED_TESTS
Exclude specific tests
-l, --list-tests List available tests
-f, --force Forces a scan when GraphQL cannot be detected
-d, --debug Append a header with the test name for debugging
-x PROXY, --proxy=PROXY
HTTP(S) proxy URL in the form
http://user:pass@host:port
-w WORDLIST, --wordlist=WORDLIST
Path to a list of custom GraphQL endpoints
-v, --version Print out the current version and exit.
See also
cve-search_mcp
Open Source
A Model Context Protocol (MCP) server for querying the CVE-Search API…
AES-Encoder
Open Source
PowerShell Obfuscator. A PowerShell script anti-virus evasion tool…
365-Stealer
Free
365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Cons…
MSSprinkler
Open Source
MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts…
GraphQL Voyager / InQL
Open Source
InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…
Viper
Free
Adversary simulation and Red teaming platform with AI…