Skip to main content

Fast async GraphQL endpoint scanner

Project description

GraphRecon 🔎

GraphRecon is a fast, asynchronous GraphQL endpoint discovery tool.
It scans common and misconfigured API paths to identify exposed GraphQL endpoints.

Designed for:

  • Bug bounty hunters
  • Pentesters
  • Security researchers

✨ Features

  • 🚀 Fully asynchronous (aiohttp + asyncio)
  • 🔍 Detects GraphQL via real GraphQL queries
  • 📍 Scans dozens of common GraphQL/API paths
  • 🧠 Stops duplicate results
  • 🌐 Detects if target is reachable
  • 🎯 Clean CLI usage

📦 Installation

Homebrew (macOS & Linux)

brew tap memirhan/graphrecon
brew install graphrecon

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

graphrecon-1.1.0.tar.gz (3.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

graphrecon-1.1.0-py3-none-any.whl (4.1 kB view details)

Uploaded Python 3

File details

Details for the file graphrecon-1.1.0.tar.gz.

File metadata

  • Download URL: graphrecon-1.1.0.tar.gz
  • Upload date:
  • Size: 3.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.11.7

File hashes

Hashes for graphrecon-1.1.0.tar.gz
Algorithm Hash digest
SHA256 3f552d955e55f770d42462b497cf9bc51bbe883b6e121f29daee7ae19cb956c3
MD5 44ad32f87f5562c3d78844a9ce8fa28d
BLAKE2b-256 8437f69d11688b54d576056a5bb325b9b42603debe64681ed77315afb5200464

See more details on using hashes here.

File details

Details for the file graphrecon-1.1.0-py3-none-any.whl.

File metadata

  • Download URL: graphrecon-1.1.0-py3-none-any.whl
  • Upload date:
  • Size: 4.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.11.7

File hashes

Hashes for graphrecon-1.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 0676ffe2b8f41955dd68803a966cb8468ee0cf249911895bfacff4f5b1d90af0
MD5 1ac5163b64893785aac1b8ea73cd933b
BLAKE2b-256 40e97ed8101f92beaef06dc583d7994dec03313fb1c4a80d7178d86859a2b48a

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page