graphqler - V2.3.6

🔍Implemented detections!

User-facing changes

• Add introspection detection
• Add field suggestions detection
• Add HTML/XSS/SQLi/File/SSRF detections
• Add OS command injection detections
• Add deny-list bypass detections
• Add easier stats parsing
• Add detection logging for easier access
• Add SKIP_NODES option to the configuration to skip any nodes that might be causing issues on the API (IE. slow endpoints)

Detections example

---

Developer changes

• Moved materializer of each detection into detection classes
• Stats parsing now parses vulnerabilities as well
• Added general abstract detection class to be extended on
• Fix duplicate logging by checking logger handlers before initialization
• Fix materializer check for soft dependencies

- Python
Published by omar2535 over 1 year ago

graphqler - V2.2.1

Objects bucket refactor

• Can now keep track of all scalars seen
• Keeps track of all fields of objects seen

General

• General bugfixes / improved error handling & objects bucket printing

- Python
Published by omar2535 over 1 year ago

graphqler - V2.2.0

• SQLI testing
• Batch query/mutation testing
• Bug fixes on error handling

- Python
Published by omar2535 over 1 year ago

graphqler - V2.1.8

What's Changed

• Add support for args in fields
• Fix bugs in logging during retries
• Add re-trier functionality on NON_NULL fields of objects
• Add INTERFACE support

- Python
Published by omar2535 over 1 year ago

graphqler - V2.1.5

• Refactor a lot of materializer code
• Add UNION type support
• Add DEBUG support

- Python
Published by omar2535 over 1 year ago

graphqler - V2.0

• IDOR checking
• Packaged GraphQLer
• Bug fixes

- Python
Published by omar2535 over 1 year ago

graphqler - V1.0

GraphQLer V1.0

GraphQLer is the first ever dependency-aware GraphQL testing tool, used to test your GraphQL API for any bugs or errors that may come from chaining your queries and mutations together! It features a dependency graph for you to inspect, outputs for you to review, and is also extensible for anyone who wants their own custom testing suite!

Features

• Testing queries and mutations
• Chaining object IDs to be used in other queries and mutations
• Creating a dependency graph
• Statistics & Logging
• Error handling

- Python
Published by omar2535 over 2 years ago

graphqler - Original GraphQLer

This version is based on the work performed in 2021

- Python
Published by omar2535 over 2 years ago