graphw00f
Detects whether a URL is serving GraphQL and fingerprints the engine. Run it from a local clone, in detect and fingerprint mode only, and only on an in-scope host.
Tags: graphql, fingerprint, detect
- Category
- graphql
- Maintenance signal
- active
Use this when: GraphQL. Fingerprint the endpoint. Introspection is inventory.
Install
git
git clone https://github.com/dolevf/graphw00f.gitCommand templates
Detect and fingerprint
python3 main.py -d -f -t https://{domain}