coelner/hacktricks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

GitBook: [master] one page modified

Browse Source
This commit is contained in:
CPol 2021-09-01 13:15:44 +00:00 committed by gitbook-bot
parent 9856d79fba
commit 4173317450
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pentesting/pentesting-web/graphql.md
View File

@ -58,6 +58,10 @@ The last code line is a graphql query that will dump all the meta-information fr
If introspection is enabled you can use [**GraphQL Voyager**](https://github.com/APIs-guru/graphql-voyager) to view in a GUI all the options.
#### No Introspection
More and more **graphql endpoints are disabling introspection**. However, the errors that graphql throws when an unexpected request is received are enough for tools like [**clairvoyance**](https://github.com/nikitastupin/clairvoyance) to recreate most part of the schema.
### Quering
Now that we know which kind of information is saved inside the database, let's try to **extract some values**.