Hello Stackers, InQL is a security testing tool to facilitate GraphQL technology security auditing efforts. InQL can be used as a stand-alone script or as a Burp Suite extension.
A Burp Extension for GraphQL Security Testing
InQL
Quickstart
To use inql
in Burp Suite, import the Python extension:
- Download the Jython Jar
- Start Burp Suite
- Extender Tab > Options > Python Environment > Set the location of Jython standalone JAR
- Extender Tab > Extension > Add > Extension Type > Select Python
- Download the latest
inql_burp.py
release here - Extension File > Set the location of
inql_burp.py
> Next - The output should now show the following message:
InQL Scanner Started!
Okay, that’s All.. for the full docs please refer to here.. cyaa…