Tigah 9340a8be0e feat(modules): add graphql introspection detection module (#139) ...

add a yaml module that posts a minimal introspection query to common
graphql paths and flags endpoints whose schema is exposed. the matcher
keys on the json result shape ("__schema":{ and "queryType":{) instead of
the bare __schema/queryType substrings, so a disabled endpoint that echoes
the query in its error does not false-positive. scoped to post+json
requests; get-only and persisted-query endpoints are out of scope.

2026-06-22 17:53:28 -07:00

..

graphql-introspection.yaml

feat(modules): add graphql introspection detection module (#139)

2026-06-22 17:53:28 -07:00

lfi-basic.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

sqli-error.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

xss-reflected.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00