GraphQL + RDP Bruteforce + PostgreSQL RCE

This commit is contained in:
Swissky
2019-07-01 23:29:29 +02:00
parent 46780de750
commit 13ba72f124
8 changed files with 73 additions and 6 deletions

View File

@@ -1,6 +1,6 @@
# GraphQL injection
> GraphQL is a query language for APIs and a runtime for fulfilling those queries with existing data.
> GraphQL is a query language for APIs and a runtime for fulfilling those queries with existing data. A GraphQL service is created by defining types and fields on those types, then providing functions for each field on each type
## Summary
@@ -30,6 +30,7 @@ Most of the time the graphql is located on the `/graphql` or `/graphiql` endpoin
```js
example.com/graphql?query={__schema{types{name}}}
example.com/graphiql?query={__schema{types{name}}}
```
Check if errors are visible.