search

doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
https://doyensec.com/
Apache License 2.0
1.52k stars 156 forks source link

New InQL checks #41

Open ikkisoft opened 2 years ago

ikkisoft commented 2 years ago

Is your feature request related to a problem?

No, just ideas for new features

Describe the solution you'd like

Integrate checks for some of the vulnerability classes discussed in this article https://wundergraph.com/blog/the_complete_graphql_security_guide_fixing_the_13_most_common_graphql_vulnerabilities_to_make_your_api_production_ready

execveat commented 1 year ago

This is a good list with ideas for future improvements, thanks! I think InQL should mark fields for SQL Injection, etc and pass them to other Burp scanners. Don't know how this works and whether this happens already, - I'll investigate it.