Pentesting GraphQL APIs

Transcript

3. graphql { GraphQL GraphQL Architecture REST Vs GraphQL GraphQL Schema Introspection Query GraphQL Vulnerabilities Pentesting Tools GraphQL in Action !!! }
9. Ref: https://bit.ly/3hLZNO7
10. Ref: https://bit.ly/3fBQSNk
13. • Query – For Retrieving data/Results, similar to GET in REST. • Mutation – For Modifications Like POST/PUT/DELETE Operations. • Subscriptions – For Events/Realtime Updates. GraphQL Schema Subscriptions (Type) - EVENTS Mutations (Type) - WRITE Query (Type) - READ
16. Change the POST request into GET Request. Append the payload on the Endpoint URL from below link https://pastebin.com/QyNaXVKg https://pastebin.com/dFdsTaDQ
18. SQL Injection NoSQL Injection Access Control Related Issues. Mass Assignment IDOR Bypassing 2FA/BruteForce Attacks. DOS Attacks etc.,