[gayass]

So, i'm trying to find a way to make my targets API show me more information about its GraphQL configs and stuff, but introspection is off, so my job became a little more difficult, so i wanted help from people who know more about the topic. Any suggestion is valid to me at this point rlly <3

Thank you in advance.

[leetone]

So, i'm trying to find a way to make my targets API show me more information about its GraphQL configs and stuff, but introspection is off, so my job became a little more difficult, so i wanted help from people who know more about the topic. Any suggestion is valid to me at this point rlly <3

Thank you in advance.

I am no expert myself and I started learning about hacking GraphQL recently, I think you can try some tricks here
https://portswigger.net/web-security/gra...n-defenses
also
https://book.hacktricks.xyz/network-serv...rospection

I hope this helps and happy hacking!.

[gayass]

So, i'm trying to find a way to make my targets API show me more information about its GraphQL configs and stuff, but introspection is off, so my job became a little more difficult, so i wanted help from people who know more about the topic. Any suggestion is valid to me at this point rlly <3

Thank you in advance.

I am no expert myself and I started learning about hacking GraphQL recently, I think you can try some tricks here
https://portswigger.net/web-security/gra...n-defenses
also
https://book.hacktricks.xyz/network-serv...rospection

I hope this helps and happy hacking!.

tyy! i'll have a look