swisskyrepo
/
GraphQLmap
mirror of https://github.com/swisskyrepo/GraphQLmap.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

README - Live examples via asciinema

add-license-1
Swissky 2019-06-22 11:25:57 +02:00
parent 567866ad18
commit 537eda5a9e
1 changed files with 21 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
README.md
View File

@ -41,27 +41,29 @@ optional arguments:
Use `dump` to dump the GraphQL schema, this function will automaticly populate the "autocomplete" with the found fields.
[:movie_camera: Live Example](https://asciinema.org/a/MvgKCTD5zTwHRkqnWMfUAFiCN)
[:movie_camera: Live Example](https://asciinema.org/a/A2oTO2KrVkkwlFapOdoETqtKa)
```powershell
GraphQLmap > dump
============= [SCHEMA] ===============
Query
doctor: email (String!),
doctors: options (JSON!),
patients:
patient: id (ID!),
allrendezvous:
rendezvous: id (ID!),
Doctor
id:
firstName:
lastName:
specialty:
patients:
rendezvous:
email:
password:
e.g: name[Type]: arg (Type!)
Query
doctor[]: email (String!),
doctors[Doctor]:
patients[Patient]:
patient[]: id (ID!),
allrendezvous[Rendezvous]:
rendezvous[]: id (ID!),
Doctor
id[ID]:
firstName[String]:
lastName[String]:
specialty[String]:
patients[None]:
rendezvous[None]:
email[String]:
password[String]:
[...]
```
@ -83,7 +85,7 @@ GraphQLmap > {doctors(options: 1, search: "{ \"lastName\": { \"$regex\": \"Admin
```
Use `GRAPHQL_INCREMENT` and `GRAPHQL_CHARSET` to fuzz a parameter.
[:movie_camera: Live Example](https://asciinema.org/a/JdgVALJwVK6BJXwRAELUIBUil)
[:movie_camera: Live Example](https://asciinema.org/a/FsXjsHQ9YilY18ofoOTrs8wXR)
```powershell
GraphQLmap > {doctors(options: 1, search: "{ \"lastName\": { \"$regex\": \"AdmiGRAPHQL_CHARSET\"} }"){firstName lastName id}}
@ -105,7 +107,7 @@ GraphQLmap > {doctors(options: 1, search: "{ \"lastName\": { \"$regex\": \"AdmiG
```
Use `BLIND_PLACEHOLDER` inside the query for the `nosqli` function.
[:movie_camera: Live Example](https://asciinema.org/a/4JGKwT6PunFzh9OwGm9v0rSgu)
[:movie_camera: Live Example](https://asciinema.org/a/geENvCljpOCBhBZ2Y3joAJwDc)
```powershell
GraphQLmap > nosqli