Exposing Users Table From a Leaky GraphQL Query
Hello Hackers, I am Inderjeet Singh aka encodedguy on HackerOne. In this blog post, I will give a walkthrough of my recent finding in which I got the data from the users table. Background 0x01: Before starting the attack, let's first understand the background of the application. For
Exploiting GraphQL Aliases
Introduction GraphQL is an API query language that allows developers to write clean code, and get as much data as they want from a single query. GraphQL uses a single endpoint like /graphql or /api/graphql and HTTP method can be POST or GET. It have queries to read data