nikitastupin / clairvoyance

Obtain GraphQL API schema even if the introspection is disabled
Apache License 2.0
960 stars 87 forks source link

Start with introspection query #82

Open Privat33r-dev opened 3 months ago

Privat33r-dev commented 3 months ago

It's assumed that user has already checked that case, but it might be useful to check with introspection query prior to the main part of trying to bruteforce.

For the flexibility's sake and due to potential sensitivity of blue team solutions, this part should be optional. But since fast profile is default, it can be enabled by default as well.