InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Introduce a session concept. A session should be associated with the particular scan result and the headers used during that scan. Session names should be predictable and easy to handle - this needs a bit of brainstorming. Tools proxying their traffic through Burp (including embedded tools such as GraphiQL) could use session by adding a special header X-InQL-Session: session-name, which would have the following impact:
InQL should replace headers with the ones from the session (perhaps in the future we could add more functionality here, such as mixing headers or adding fancy logic like JWT auto-renewal)
InQL should server introspection results locally, using the cached schema
Introduce a session concept. A session should be associated with the particular scan result and the headers used during that scan. Session names should be predictable and easy to handle - this needs a bit of brainstorming. Tools proxying their traffic through Burp (including embedded tools such as GraphiQL) could use session by adding a special header
X-InQL-Session: session-name
, which would have the following impact: