GraphQL Raider
Summary: GraphQL Raider is a Burp Suite extension, version 1.0.0-17 by Dennis Kniep and last updated 12 August 2019, that tests endpoints implementing GraphQL by extracting the gql query and variables from the JSON body and displaying them in separate tabs. It also extracts values inside the query as insertion points for Burp's active scanner, so payloads are positioned at the correct place inside a gql query.
Bottom line: The extension carries a stated overall system impact of Low and is written by a third-party Burp user, with PortSwigger making no warranty about its quality or usefulness for any particular purpose - so the tooling a team points at its GraphQL endpoints arrives with that caveat attached.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026