Screenshots
Example Usage
$ python3 graphql-cop.py -h
Usage: graphql-cop.py -t http://example.com -o json
Options:
-h, --help show this help message and exit
-t URL, --target=URL target url with the path - if a GraphQL path is not
provided, GraphQL Cop will iterate through a series of
common GraphQL paths
-H HEADER, --header=HEADER
Append Header(s) to the request '{"Authorization":
"Bearer eyjt"}' - Use multiple -H for additional
Headers
-o FORMAT, --output=FORMAT
json
-e EXCLUDED_TESTS, --excluded-tests=EXCLUDED_TESTS
Exclude specific tests
-l, --list-tests List available tests
-f, --force Forces a scan when GraphQL cannot be detected
-d, --debug Append a header with the test name for debugging
-x PROXY, --proxy=PROXY
HTTP(S) proxy URL in the form
http://user:pass@host:port
-w WORDLIST, --wordlist=WORDLIST
Path to a list of custom GraphQL endpoints
-v, --version Print out the current version and exit.
See also
AES-Encoder
Open Source
PowerShell Obfuscator. A PowerShell script anti-virus evasion tool…
aizawa
Open Source
Aizawa is a command-line webshell designed to execute commands through HTTP header…
BlueToolkit
Free
BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover ne…
Impacket
Open Source
Kali
Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…
API-Pentesting-Tools
Open Source
API Pentesting Tools are specialized security tools used to test and analyze the security of Applica…
GraphQL Voyager / InQL
Open Source
InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…