GraphQLer
A dependency-aware GraphQL API fuzzing tool that automatically generates and executes security tests based on schema introspection.
What is GraphQLer?
GraphQLer is a security testing tool designed specifically for GraphQL APIs. It automates the discovery of vulnerabilities by introspecting the API schema, understanding dependencies between operations, and executing context-aware fuzzing attacks. It solves the problem of manual, repetitive security testing by providing an automated, intelligent pipeline for uncovering issues like IDOR and injection flaws.
Security engineers, penetration testers, and developers responsible for securing GraphQL-based applications who need an automated tool to find vulnerabilities beyond basic schema introspection.
Developers choose GraphQLer because it is the only open-source tool that performs dependency-aware fuzzing, automatically constructing realistic attack chains that mirror how an attacker would interact with the API, leading to more accurate and severe vulnerability findings compared to naive fuzzers.
Overview
🔍A cutting edge context aware GraphQL API fuzzing tool!
Use Cases
Best For
- Automated security testing of GraphQL APIs in CI/CD pipelines
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
