Exploiting GraphQL by @infosec_au Overview of GraphQL attacks. Contents: • Intro • BatchQL • Introspection • Suggestions • CSRF • JSON list based batching • Query name based batching • Conclusion https://blog.assetnote.io/2021/08/29/exploiting-graphql/ 541 views11:30