Screenshots
Example Usage
$ python3 graphql-cop.py -h
Usage: graphql-cop.py -t http://example.com -o json
Options:
-h, --help show this help message and exit
-t URL, --target=URL target url with the path - if a GraphQL path is not
provided, GraphQL Cop will iterate through a series of
common GraphQL paths
-H HEADER, --header=HEADER
Append Header(s) to the request '{"Authorization":
"Bearer eyjt"}' - Use multiple -H for additional
Headers
-o FORMAT, --output=FORMAT
json
-e EXCLUDED_TESTS, --excluded-tests=EXCLUDED_TESTS
Exclude specific tests
-l, --list-tests List available tests
-f, --force Forces a scan when GraphQL cannot be detected
-d, --debug Append a header with the test name for debugging
-x PROXY, --proxy=PROXY
HTTP(S) proxy URL in the form
http://user:pass@host:port
-w WORDLIST, --wordlist=WORDLIST
Path to a list of custom GraphQL endpoints
-v, --version Print out the current version and exit.
See also
100-redteam-projects
Free
Projects for security students…
xalgorix
Open Source
Xalgorix - The Most Powerful Open-Source AI Pentesting Agent…
Impacket
Open Source
Kali
Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…
Netexec (nxc)
Open Source
Kali
The maintained fork and successor to CrackMapExec. Network service exploitation Swiss army knife for…
GraphQL Voyager / InQL
Open Source
InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…
Advanced-WAF-WAFinity
Free
An Advanced Web Application Firewall that protects against threats like SQL injection and XSS by fil…