Book files for Black Hat GraphQL.

Black Hat GraphQL is for anyone interested in learning how to break and protect GraphQL APIs with the aid of offensive security testing. Whether you’re a penetration tester, security analyst, or software engineer, you’ll learn how to attack GraphQL APIs, develop hardening procedures, build automated security testing into your development pipeline, and validate controls, all with no prior exposure to GraphQL required. Buy the book from No Starch Press

Enjoy!

• Page 83 Listing 4-14: grep command should be corrected to: grep -Hnio "graphiql\|graphql-playground" dvga-report/source/*
• Page 112: The sentence "In DVGA, run the following query [...]" should read: "In Altair, run the following query [...]".
• Page 177: The COOKIES variable value should read {"session":"session-secret"}

• Due to changes in InQL, you may need to install the tool from the its V4 branch, latest version being 4.0.7