domains / families / security / hunt-graphql

hunt-graphql

authentic

Hunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GID, mutation IDOR including AI/LLM features, cross-tenant IDOR, SSRF via argument, batching-DoS, query-cost-bypass, SQLi via argument, broken-object-level-authz, auth-bypass via unscoped mutations, and PII exposure from missing field-level authz. Use when hunting graphql on any target.

When to use

• IDOR via node() / GID
• mutation IDOR including AI/LLM features
• cross-tenant IDOR
• SSRF via argument
• batching-DoS
• query-cost-bypass
• SQLi via argument
• broken-object-level-authz

Skill page

Source