Search for known GraphQL URL paths the tool will grep and match known values to detect GraphQL endpoints within the target website.Using the inql extension for Burp Suite, you can: We believe this feature, combined with the ability to send query templates to Burp’s Repeater, will decrease the time to exploit vulnerabilities in GraphQL endpoints and drastically lower the bar for security research against GraphQL tech stacks. The scanner has the ability to identify basic query types and replace them with placeholders that will render the query ready to be ingested by a remote API endpoint. InQL is also able to generate query templates for all the known types. This information is collected and then processed to construct API endpoints documentation in the form of HTML and JSON schema. The tool leverages GraphQL built-in introspection query to dump queries, mutations, subscriptions, fields, arguments and retrieve default and custom objects.

InQL can be used as a stand-alone script, or as a Burp Suite extension (available for both Professional and Community editions).

Burp suite professional github