skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-graphql

Discover GraphQL vulnerabilities via schema introspection and response header validation.

5|Updated May 27, 2026
Search Tags:#graphql#web security#security scanning#api security#vulnerability hunting
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-graphql-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-graphql
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-graphql
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-graphql-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill hunts for GraphQL vulnerabilities across a wide range of targets, ensuring you can uncover critical issues within your infrastructure.

Core Features & Use Cases

  • Vulnerability Hunting: Scans for GraphQL-specific vulnerabilities such as IDOR, SSRF, and authorization bypasses.
  • Schema Discovery: Maps out the full GraphQL schema for in-depth analysis.
  • Use Case: Deploy this Skill on your application to identify any potential GraphQL security holes that could lead to data breaches or system compromises.

Quick Start

Activate the Skill and specify the target URL for it to begin hunting for GraphQL vulnerabilities.

Frequently Asked Questions about hunt-graphql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a GraphQL API for IDOR and SSRF vulnerabilities?▼

Scanning for GraphQL vulnerabilities involves querying schema introspection and validating response headers indicative of GraphQL APIs to identify cross-tenant IDOR, SSRF, and authorization bypasses across your application endpoints.

What is GraphQL schema introspection used for in security testing?▼

GraphQL schema introspection is used for mapping out the full API schema for in-depth vulnerability analysis. It queries the target endpoint to identify structural patterns and uncover security holes like batching-DoS and cross-tenant IDOR.

How do I discover GraphQL endpoints to test for batching-DoS attacks?▼

To discover GraphQL endpoints for testing batching-DoS attacks, you validate response headers and patterns indicative of GraphQL APIs. This identifies endpoints exposing GraphQL functionality so you can hunt for batching-DoS vulnerabilities.

Can I use this to hunt for authorization bypasses in my web application?▼

Yes, you can hunt for authorization bypasses in your web application by querying schema introspection on endpoints exposing GraphQL functionality. This identifies potential security holes that could lead to data breaches or system compromises.

Do I need endpoint access to scan for GraphQL API security risks?▼

Yes, you need access to endpoints that expose GraphQL functionality to scan for GraphQL API security risks. The vulnerability hunting process requires querying a specified target URL to validate response headers and map the schema.

What is the best way to map a full GraphQL schema for vulnerability hunting?▼

The best way to map a full GraphQL schema for vulnerability hunting is by querying schema introspection on a specified target URL. This maps the entire schema for in-depth analysis to identify cross-tenant IDOR, SSRF, and batching-DoS risks.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

graphql-methodology

Identify GraphQL endpoints and test introspection, injection, and authorization bypass.

Official
Advanced
langbyyilangbyyi
96

API Fuzzing for Bug Bounty

Fuzz REST, SOAP, and GraphQL APIs for vulnerabilities.

Community
Intermediate
aegnticaegntic
4

api-tester

Test and debug REST and GraphQL APIs with curl and httpie.

Community
Intermediate
YukiIto1999YukiIto1999

api-security

Automate API security assessment across GraphQL, REST, WebSocket, and Web-LLM interfaces.

Community
Intermediate