graphw00f: GraphQL Server Fingerprinting
graphw00f – GraphQL Server Fingerprinting
graphw00f is a Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
How does it work?
graphw00f is a Python utility which sends a mix of benign and malformed queries to determine the GraphQL engine running behind the scenes. graphw00f will provide insights into what security defenses each technology provides out of the box, and whether they are on or off by default.
Specially crafted queries cause different GraphQL server implementations to respond uniquely to queries, mutations, and subscriptions, this makes it trivial to fingerprint the backend engine and distinguish between the various GraphQL implementations. (CWE: CWE-200)
Detections
graphw00f currently attempts to discover the following GraphQL engines:
- Graphene – Python
- Ariadne – Python
- Apollo – TypeScript
- graphql-go – Go
- gqlgen – Go
- WPGraphQL – PHP
- GraphQL API for WordPress – PHP
- Ruby – GraphQL
- graphql-php – PHP
- Hasura – Haskell
- HyperGraphQL – Java
- graphql-java – Java
- Juniper – Rust
- Sangria – Scala
- Flutter – Dart
- Diana.jl – Julia
- Strawberry – Python
- Tartiflette – Python
GraphQL Technologies Defence Matrices
Each fingerprinted technology (e.g. Graphene, Ariadne, …) has an associated document (example for graphene) which covers the security defense mechanisms the specific technology supports to give a better idea of how the implementation may be attacked.
Download
git clone https://github.com/dolevf/graphw00f.git
Use
Copyright (c) 2021, graphw00f
All rights reserved.
Source: https://github.com/dolevf/
