Lucene search
+L

3607 matches found

Kitploit
Kitploit
added 2026/09/13 12:09 p.m.198 views

inql

InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:07 p.m.62 views

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:07 p.m.12 views

batchql

BatchQL BatchQL es un script de auditoría de seguridad de GraphQL centrado en realizar consultas y mutaciones GraphQL por lotes. Este script no es complejo y agradecemos las mejoras. Al explorar el espacio problemático de los ataques de batching en GraphQL, encontramos que hay algunas publicacion...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:57 a.m.141 views

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:37 a.m.3 views

cli

CloudGraph es la herramienta gratuita de código abierto universal API de GraphQL y Gestión de Postura de Seguridad en la Nube CSPM para AWS, Azure, GCP y K8s. Con CloudGraph obtienes: Verificaciones de cumplimiento gratuitas y sin esfuerzo p. ej., Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CI...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 11:09 a.m.154 views

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 11:09 a.m.7 views

graphw00f

Créditos a Nick Aleks por el logo! graphw00f - Fingerprinting de servidores GraphQL Tabla de Contenidos ¿Cómo funciona? Detecciones Matriz de Amenazas GraphQL Requisitos previos Instalación Configuración Ejemplo de uso Fingerprinting de GraphQL Detección y Fingerprinting de GraphQL Soporte e...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 10:33 a.m.67 views

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

5.7AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/13 10:30 a.m.8 views

hulak

Git-native API client with encrypted secrets. REST · GraphQL · OAuth Quick Start • GraphQL Explorer • Project Layout • Documentation Run one request, a whole directory, or stay interactive root@kitploit: hulak run ./requests/ Hulak runs request files directly from your project. It supports...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/13 10:15 a.m.9 views

ApiHunter

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🎯 ApiHunter 📺 Video Demo Click to watch the full demo on YouTube 🖥️ Desktop App...

6AI score
SaveExploits0References23
Kitploit
Kitploit
added 2026/09/13 9:35 a.m.5 views

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:54 a.m.5 views

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 6:12 a.m.7 views

resterm

Resterm A terminal API client for REST, GraphQL, gRPC, WebSocket and SSE. Resterm stores API requests in plain .http and .rest files that you can diff, review and track in version control. Edit and send requests in the terminal, or run them from scripts and CI. Request files support workflows,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:00 a.m.6 views

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security. Table of Contents About DVGA Operation Modes Scenarios Prerequisites Installation Installation - Docker...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.50 views

WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...

9.1CVSS7.9AI score0.34761EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.155 views

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

6.3CVSS5.7AI score0.0117EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.84 views

Craft CMS <=v3.7.31 - SQL Injection

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint. id: CVE-2024-37843 info: name: Craft CMS =v3.7.31 - SQL Injection author: iamnoooob,rootxharsh,pdresearch severity: critical description: | Craft CMS up to v3.7.31 was discovered to conta...

9.8CVSS5.7AI score0.53242EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.88 views

SkyWalking SQLI

When using H2/MySQL/TiDB as Apache SkyWalking storage and a metadata query through GraphQL protocol, there is a SQL injection vulnerability which allows access to unexpected data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQ...

7.5CVSS7.2AI score0.34613EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.128 views

Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2020-26413 info:...

5.3CVSS6.1AI score0.34931EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.41 views

GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

9.4CVSS8.1AI score0.05811EPSS
SaveExploits6References4
Rows per page
Query Builder