swisskyrepo / GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
MIT License
1.33k stars 187 forks source link

strategy support #22

Open orangecms opened 4 years ago

orangecms commented 4 years ago

Leveraging #21, or even without full automation, it would be nice to allow implementing or choosing a (custom) strategy. By that I mean various ways to iterate over fields, randomly choose queries, and stuff like that. I can imagine additional CLI switches to choose from predefined strategies and/or exposing the utilities as a library and having an API to allow users to supply their own custom strategy implementations. I am sadly not much of a Python expert, so I wouldn't yet know how; please drop your ideas and thoughts while I am looking further into options myself. Feedback is welcome!