sk Skill · PentesterFlow
graphql
GraphQL pentest playbook — find the endpoint, dump the schema (introspection or field-suggestion fallback), then test for authorization gaps, query batching, alias overload, depth-based DoS, and SQLi/NoSQLi in resolver arguments. Use when the target exposes a /graphql endpoint, GraphiQL, Apollo, or accepts GraphQL queries.
Open on skills.sh ↗read 2026-09-17
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 6
- Connections
- 4
jsongraphqlTypeScript
- Host repository
- PentesterFlow/agent
- Allowed tools
- http, shell, read_payloads, file_write
- Host stars
- 1,360
- Host language
- TypeScript