https://github.com/denniskniep/gqlraider

GQL Burp Extension
https://github.com/denniskniep/gqlraider

burp burp-extensions burp-plugin burpsuite-extender gql graphql

Last synced: about 22 hours ago
JSON representation

GQL Burp Extension

• Host: GitHub
• URL: https://github.com/denniskniep/gqlraider
• Owner: denniskniep
• Created: 2019-05-24T21:08:57.000Z (over 5 years ago)
• Default Branch: develop
• Last Pushed: 2022-09-16T21:06:37.000Z (about 2 years ago)
• Last Synced: 2024-11-09T06:38:27.825Z (10 days ago)
• Topics: burp, burp-extensions, burp-plugin, burpsuite-extender, gql, graphql
• Language: Java
• Size: 88.9 KB
• Stars: 21
• Watchers: 5
• Forks: 14
• Open Issues: 8
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# GraphQL Raider - GQL Burp Extension

[![Build status](https://dev.azure.com/kniepdennis/GQL%20Raider/_apis/build/status/GQL%20Raider?branchName=master)](https://dev.azure.com/kniepdennis/GQL%20Raider/_build/latest?definitionId=1)

## Description

GraphQL Raider is a Burp Suite Extension for testing endpoints implementing GraphQL.

## Features 

### Display and Editor

The gql query and variables are extracted from the unreadable json body and displayed in separate tabs.

While intercepting or resending you can manipulate the gql query and variables inside the gql tab and the message will be correctly send.

![Display and Editor](doc/editor-gql.png)

### Scanner Insertion Points

Not only the variables are extracted as insertion point for the scanner. Furthermore the values inside the query are also extracted as insertion point for the scanner.

The detected insertion points are displayed for information and better transparency inside the qgl tab of a message

![Insertion Points](doc/injectionpoints-gql.png)

Insertion points are used by active scanner to insert the payloads for detecting vulnerabilities. 

The custom gql insertion points helps the active scanner to position the payloads at the correct place inside of a gql query.

## GraphQL

> GraphQL is a query language for APIs and a runtime for fulfilling those queries with your existing data

https://graphql.org/

### Serving over HTTP

https://graphql.org/learn/serving-over-http/

#### HTTP GET 

GraphQL query should be specified in the "query" query string.

`http://myapi/graphql?query={me{name}}`

#### HTTP POST

JSON-encoded body

```

{

  "query": "...",

  "operationName": "...",

  "variables": { "myVariable": "someValue", ... }

}

```

## Develop

## Release

A GitHub Release is triggered by AzureDevOps if commits are added to the branch `master`