search

nikitastupin / clairvoyance

Obtain GraphQL API schema even if the introspection is disabled
Apache License 2.0
967 stars 87 forks source link

add: add proxies option to pass traffic through burp suite #36

Closed arthur4ires closed 1 year ago

arthur4ires commented 2 years ago

Hi, hope you are well :)

Thanks a lot for the tool, it contributes a modification to watch traffic using BurpSuite.

The example command is as follows:

python3 -m clairvoyance -vv -o output -w google-10000-english.txt -p http://127.0.0.1:8080 -k https://site/graphql
arthur4ires commented 2 years ago

For me it's ok, thank you for the reply :)

arthur4ires commented 2 years ago

Yes, I will make the changes :)

arthur4ires commented 2 years ago

Hello @nikitastupin , I accepted your modifications, thanks for the suggestions in the code!

zeroc00I commented 1 year ago

Sup folks Some updates here?

nikitastupin commented 1 year ago

Hey @zeroc00I,

I believe you can use the HTTP_PROXY & HTTPS_PROXY environment variables to proxy clairvoyance https://requests.readthedocs.io/en/latest/user/advanced/#proxies

QuentinN42 commented 1 year ago

Hey @arthur4ires @zeroc00I at Escape, we are working to secure the graphql api. We forked this repo a week ago and I implemented this feature there.

https://github.com/Escape-Technologies/ClairvoyanceNext

arthur4ires commented 1 year ago

Hi there, thanks a lot for the update :)