Identifies and tests GraphQL API denial-of-service vulnerabilities through recursive nesting and query complexity analysis.
This skill enables AI agents to conduct thorough security assessments of GraphQL APIs by simulating depth limit and resource exhaustion attacks. It provides specialized techniques for identifying vulnerabilities related to circular references, alias-based amplification, and complex fragment spreads that could lead to server downtime. By utilizing standardized implementation patterns and automated testing scripts, security professionals and developers can validate their API's resilience against malicious queries and implement robust mitigation strategies like query complexity analysis, depth limiting middleware, and timeout controls.
主要功能
01Alias-based amplification testing
02Fragment spread complexity analysis
03Recursive query depth simulation
040 GitHub stars
05Detailed mitigation and defense strategies
06Automated Python testing script generation
使用场景
01Conducting penetration tests on GraphQL endpoints to prevent DoS attacks
02Validating the effectiveness of GraphQL security middleware and validation rules
03Auditing API schemas for circular relationship vulnerabilities during development
