doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
https://doyensec.com/
Apache License 2.0
1.51k stars 156 forks source link

[Improper parsing]: #119

Closed zagrosbingol closed 11 months ago

zagrosbingol commented 1 year ago

InQL version

BApp Store

GraphQL API

https://api.republik.ch/graphql

GraphQL specification version

No response

What isn't working?

Hello,

I have configured burp to use jython 2.3 and i am currently recieving the following error, when trying to fetch the introspection schema. The introspection is successful, however the issue is as the following:

Solutions attempted:

None of the above succeeds.

Is there any fix that can be implemented?

execveat commented 1 year ago

Hey there! Could you please help me replicating the issue:

  1. Looks like you're running Linux, is it Kali or some other distro? Which release? Is architecture x64 or something else?
  2. Did you get the standalone Jython from https://www.jython.org/download.html or some other source?
  3. Did you install InQL from BApp Store within the Burp, are you running JAR from https://github.com/doyensec/inql/releases/tag/v5.0.1 or did you build it yourself?

I haven't seen this error, but I'll try to fix it as soon as I manage to replicate it. Thanks for the help.

HakuPiku commented 1 year ago

I was having this same issue with the BApp store version. Switching to the latest release on Github fixed the issue.

1) I am on Macbook air (M2).
2) Standalone from that link -- works for everything else 3) BApp store version