API Security

GraphQL Attacks

Learn how to exploit GraphQL APIs — introspection abuse, BOLA/IDOR, batching attacks, and field suggestions to map hidden data.

Intermediate50 min7 lessons2 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

Lessons

1How a Researcher Stole 700M LinkedIn Profiles via GraphQL
2Recon — Mapping a GraphQL API
3Attacks — BOLA, Batching, and Deep Queries
4Your Turn: Map the SchemaHANDS-ON
5Reading GraphQL Schema Results
6Module quiz
7Hands-on Lab: Exploit Nexy GraphQLHANDS-ON