skills.rest
dreadnode
dreadnodeOFFICIAL
Explore all skills by this author →
Website𝕏@dreadnodeGitHub

graphql-pentest

Identify and exploit security vulnerabilities in GraphQL APIs across common attack surfaces.

11|1|Updated May 4, 2026
Search Tags:#graphql#introspection#api-security#pentesting#csrf#red-teaming#resource-abuse
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill graphql-pentest
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: graphql-pentest
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/graphql-pentest
Command: npx skills add https://github.com/dreadnode/capabilities --skill graphql-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Penetration testers and security teams often miss critical GraphQL API vulnerabilities due to ad-hoc testing approaches that fail to cover the full attack surface, including resource abuse, auth flaws, and information disclosure. This Skill eliminates that gap with a structured, repeatable testing workflow.

Core Features & Use Cases

  • Complete Attack Surface Coverage: Tests all common GraphQL vulnerability classes including batching DoS, alias amplification, circular fragment crashes (CWE-674), deep nesting, introspection exploitation, and content-type CSRF.
  • Backend-Aware Testing: Includes fingerprinting for Apollo Server, graphql-java, Hasura, and Yoga to avoid wasting time on inapplicable attack vectors.
  • Use Case: A red team assessing a customer-facing application with a GraphQL API can use this Skill to systematically identify all exploitable flaws, measure DoS impact with timing evidence, and produce validated proof for remediation.

Quick Start

Use the graphql-pentest skill to run a full security assessment of all GraphQL endpoints on your target application, including resource abuse, auth bypass, and information disclosure testing.

Frequently Asked Questions about graphql-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test a GraphQL API for resource abuse and DoS vulnerabilities?▼

To test GraphQL API security for resource abuse, you systematically execute batching DoS, alias amplification, and deep nesting attacks. This identifies backend limits by measuring response timing and validating crash evidence like circular fragments.

What is the best way to fingerprint a GraphQL backend during a penetration test?▼

Fingerprinting a GraphQL backend during a penetration test involves analyzing server responses for signatures of Apollo Server, graphql-java, Hasura, or Yoga. This prevents wasting time on inapplicable attack vectors.

How does introspection exploitation work on public-facing GraphQL endpoints?▼

Introspection exploitation on GraphQL endpoints works by systematically mining the schema to extract hidden types, queries, and mutations. This bypasses standard access controls to map the full attack surface for information disclosure.

Can I test GraphQL content-type CSRF vulnerabilities without manual query crafting?▼

You can test GraphQL content-type CSRF vulnerabilities without manual query crafting by using a structured testing workflow. This automates validation to identify cross-site request forgery flaws across web applications.

Does this approach cover microservices exposing GraphQL endpoints?▼

Yes, this approach covers microservices exposing GraphQL endpoints by applying systematic endpoint discovery and vulnerability assessment. It targets all public-facing APIs regardless of the underlying backend architecture.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

api-fuzz

Automate API security testing with endpoint discovery and semantic fuzzing.

Official
Intermediate
jinyimeng01jinyimeng01
54

report-agent

Generate HackerOne-format vulnerability reports from validated security findings.

Community
Advanced
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced