skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

hunt-graphql

Identify and exploit GraphQL vulnerabilities including IDOR, authorization bypasses, and race conditions.

3|1|Updated Jul 2, 2026
Search Tags:#security#api#reconnaissance#graphql#pentesting#idor
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-graphql-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-graphql
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-graphql
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-graphql-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of securing GraphQL APIs by identifying deep-seated vulnerabilities like IDOR, authorization bypasses, and race conditions that traditional scanners often miss.

Core Features & Use Cases

  • Schema Enumeration: Discover hidden endpoints and fields even when introspection is disabled.
  • Exploit Chain Engine: Identify and test complex chains like REST/GraphQL state desync and cross-tenant IDOR.
  • Use Case: Use this skill to audit a B2B SaaS platform for authorization persistence bugs where team membership changes in a REST API are not correctly reflected in GraphQL mutations.

Quick Start

Use the hunt-graphql skill to map the schema and test for authorization boundaries on the target endpoint.

Frequently Asked Questions about hunt-graphql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test GraphQL APIs for IDOR and authorization bypass vulnerabilities?▼

To find IDOR vulnerabilities in GraphQL APIs, you perform systematic schema enumeration and mutation analysis to identify insecure authorization boundaries and validate cross-tenant data access.

Can I enumerate a GraphQL schema when introspection is disabled?▼

Yes, you can enumerate GraphQL schemas with introspection disabled by applying advanced reconnaissance techniques to discover hidden endpoints and fields through mutation analysis and cross-API state verification.

How do I exploit race conditions in modern web applications using GraphQL?▼

Exploiting race conditions in GraphQL requires cross-API state verification to detect desynchronization between REST and GraphQL state management, validating security impact through complex exploit chains.

What is the best way to audit B2B SaaS platforms for authorization persistence bugs?▼

Auditing B2B SaaS platforms for authorization persistence bugs requires verifying if team membership changes in a REST API are correctly reflected in GraphQL mutations to prevent privilege escalation.

Does this GraphQL pentesting approach find vulnerabilities that traditional scanners miss?▼

Yes, this GraphQL pentesting approach finds vulnerabilities traditional scanners miss by identifying deep-seated issues like REST/GraphQL state desync and cross-tenant IDOR through systematic schema enumeration.

Related Skills

Explore More Software Engineering Skills→
riandeoliveirariandeoliveira

conducting-api-security-testing

Test REST and GraphQL APIs for OWASP Top 10 vulnerabilities.

Community
Advanced
SnailSploitSnailSploit
2.9k

graphql-security

Test GraphQL APIs for introspection abuse, injection, and authorization bypasses.

Community
Advanced
pdparchitectpdparchitect
13

hunt-graphql

Identify and exploit GraphQL API vulnerabilities including IDOR and broken authorization.

Community
Advanced
phatblatphatblat
12

WebAssessment

Automate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.

Community
Advanced