swisskyrepo/GraphQLmap
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;) observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2630
- days_rel: n/a
- days_push: 905
- n_releases_24m: 0
Adoption not part of the score
1688 stars · 228 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
GraphQLmap is a Python scripting engine and interactive CLI for interacting with GraphQL endpoints during penetration testing. It supports schema dumping, query execution with autocomplete, field fuzzing, and SQL/NoSQL injection testing against GraphQL fields.
Use cases
- dump a graphql endpoint schema during a pentest
- fuzz graphql fields to discover hidden parameters
- test graphql fields for sql injection
- test graphql fields for nosql injection
- bruteforce graphql field values in ctf challenges
- send graphql queries through a proxy like burp
When to choose
- you are pentesting or CTF-solving a GraphQL endpoint and need injection/fuzzing tooling
- you want an interactive shell with autocomplete for crafting GraphQL queries
- you need to quickly dump and explore a GraphQL schema
When to avoid
- you need a general-purpose GraphQL client for legitimate application development
- you require a full vulnerability scanner with reporting rather than a manual testing console
- you need actively maintained tooling with recent updates and broad GraphQL feature support
Facets
cli-tool · maturity maintenance
security penetration-testing http-client cli security penetration-testing apis developer-tools python cli windows graphql pentesting sql-injection nosql-injection fuzzing ctf schema-dumping linux macos
1 source
- readme: https://github.com/swisskyrepo/GraphQLmap · fetched 2026-08-28 · 48f1f4f1ccb8
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| swisskyrepo/GraphQLmap | main | 32 |
For agents
markdown · JSON · MCP: product_card(name="swisskyrepo/GraphQLmap")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem