GraphQL Injection

• inql - InQL - A Burp Extension for GraphQL Security Testing

• GraphQLmap - GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

• shapeshifter - GraphQL security testing tool

• graphql_beautifier - Burp Suite extension to help make Graphql request more readable

• clairvoyance - Obtain GraphQL API schema despite disabled introspection!