Find GraphQL → introspect → Cop
Locate the endpoint, dump the schema if allowed, then run the cheap automated checks.
Level: intermediate
Tools: ffuf, clairvoyance, graphql-cop
Pipeline
ffuf -u {url}/FUZZ -w graphql.txt -mc 200,400 -t 20; graphql-cop -t {gql}