swisskyrepo / GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
MIT License
1.33k stars 187 forks source link

Update attacks.py #17

Closed onSec-fr closed 4 years ago

onSec-fr commented 4 years ago

Hello, Here's a proposal for improvement !

I removed the _datasize variable, instead the loop stops when no more characters are found. Benefits : It can find the full value without knowing its length + Avoid infinite loops.

I also added the possibility to choose a custom charset. If left blank its set to abcdefghijklmnopqrstuvwxyz1234567890.

Best Regards