root💀senseicat:~#

Hack. Eat. Sleep. Repeat!!!

---

Project maintained by SENSEiXENUS Hosted on GitHub Pages — Theme by mattgraham

---

GRAPHQL tricks

---

Using Curl

---

• Syntax-:

curl https://localhost:5000/api/v1/graphql -H "Content-Type: application/json" -d @introspection.json | jq ".data" | tee schema.json

---

Graphql Dorks

---

• FOFA-:

body="GraphQL Server" && title="Graphql"

---

Common list so far

---

• Urls-:

/query
/graphql

---

Creating Fragments

---

• Fragment-:

fragment UserFields on User {
  id
  username
  email
}

• Calling it-:

query GetUsers {
  activeUsers {
    ...UserFields
    status
  }
  adminUsers {
    ...UserFields
    permissions
  }