GraphDNA

GraphDNA is a tool that uses multiple heuristics to fingerprint GraphQL endpoints.

Getting Started

It takes only two simple steps to fingerprint an endpoint using GraphDNA.

pip install graphdna
graphdna -u https://example.com/graphql

Options

GraphDNA supports the following options:

graphdna \ 
# Url to fingerprint
--url/-u https://example.com/graphql \
# Header (chainable)
--header/-H "Authorization: Bearer token"

Supported engines

Environment Variables

Logger - No effect if you pass your own logger

Integration

import logging
from typing import Dict, Optional

from graphdna import detect_engine, detect_engine_async
from graphdna.entities import GraphQLEngine

def detect_engine(
    url: str,
    headers: Optional[Dict[str, str]] = None,
    logger: Optional[logging.Logger] = None,
) -> Optional[GraphQLEngine]:
    ...


async def detect_engine_async(
    url: str,
    headers: Optional[Dict[str, str]] = None,
    logger: Optional[logging.Logger] = None,
) -> Optional[GraphQLEngine]:
    ...

Local installation

git clone git@github.com:Escape-Technologies/graphdna.git
cd graphdna
chmod +x ./install-dev.sh
./install-dev.sh

Credits

• Graphw00f
• Dolev Farhi

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

License

MIT