Omar
Omar
# Pull request checklist - [x] The PR has a proper title. Use [Semantic Commit Messages](https://seesparkbox.com/foundry/semantic_commit_messages). (No more branch-name title please) - [x] Make sure you are requesting the right...
# Overview Scouring the open internet, we can find various tools which perform security audits against GraphQL APIs. One of such interesting tools is [graphql-cop](https://github.com/dolevf/graphql-cop). GraphQLer can implement some of...
## Context Some APIs in the open have quotas on how many requests can be sent in a specific amount of time. Since GraphQLer doesn't have a sense of how...
## LLM Fuzzing - Parameters right now are randomly chosen when there are no objects corresponding to the input in the objects bucket. Use an LLM to generate parameters than...
Implement all attacks outlined in [DVGA](https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application)
I already got started on a [branch ](https://github.com/omar2535/GraphQLer/tree/sphinx) that contains some boilerplate to generate [spinx](https://www.sphinx-doc.org/en/master/) documentation. Since GraphQLer has a lot of handy functions, it would be useful to have...
Possible endpoints are usually paths like `/graphql` `/graphiql` `/api` We can check for this if the user doesn't know what the endpoint is
Make it easier for testers to sift through endpoint responses. Probably easy to add it to the `stats` module
# Overview Subscriptions are very different from normal Queries and Mutations. They use websockets instead of POST requests. This can also be a vector of attack, as possible leaks in...