6 tools and resources
A scripting engine for interacting with GraphQL endpoints for pentesting purposes.
InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection
Obtain GraphQL API schema even if the introspection is disabled
A Burp Suite extension that formats GraphQL requests for easier reading
A GraphQL security testing tool
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security