Graphql Vulnerability Scanning Tool

[secfb]

I'm using this plugin for my GraphQL tests. I think it's lacking in identifying known GraphQL security vulnerabilities. Could you review the project below and add it to this plugin?

https://github.com/kamakauzy/graphql-hunter

[bartek-doyensec]

Hi! Thanks for opening this.

Could you please provide more details on what you have in mind? Specifically, which parts of the linked project are you missing in our current implementation?

Once we understand the specific scope of the request, we can review it further.

[secfb]

Hi, I'm enjoying using this plugin. Could you add security checks like the ones in these reference files? I just wanted to offer these as suggestions.

https://checkmarx.com/blog/alias-and-directive-overloading-in-graphql/
https://checkmarx.com/blog/exploiting-graphql-query-depth/
https://exploit-notes.hdks.org/exploit/web/graphql/
Avoid GraphQL Denial of Service attacks through batching and aliasing
https://escape.tech/blog/graphql-batch-attacks-cause-dos/
Unchecked GraphQL Query Length: Potential Denial of Service Vulnerability
https://www.acunetix.com/vulnerabilities/web/unchecked-graphql-query-length-potential-denial-of-service-vulnerability/
The 8 Most Common GraphQL Vulnerabilities (and How to Fix Them)
https://escape.tech/blog/8-most-common-graphql-vulnerabilities/

[brave-red]

https://github.com/nayangoel/AIGraphqlPentester

[bartek-doyensec]

Thanks, I will take a look into these and try to implement some of the interesting features.

In the meantime, if you would like to see something specific in InQL, please create a separate issue for each feature so we can prioritize them.