Files
nuclei-templates/http/technologies/graphql/graphql-flutter-detect.yaml
2025-07-14 12:57:01 +07:00

32 lines
912 B
YAML

id: graphql-flutter-detect
info:
name: Graphql Flutter Detect
author: princechaddha
severity: info
reference: https://github.com/dolevf/graphw00f/blob/main/graphw00f/lib.py
tags: tech,graphql,flutter
requests:
- method: POST
path:
- "{{BaseURL}}/graphql"
- "{{BaseURL}}/api/graphql"
- "{{BaseURL}}/query"
- "{{BaseURL}}/"
body: '{"query":"query { __typename @deprecated }"}'
headers:
Content-Type: application/json
redirects: true
matchers-condition: and
matchers:
- type: status
status:
- 200
- 400
- type: word
words:
- 'Directive "deprecated" may not be used on FIELD.'
part: body
# digest: 4a0a00473045022100950513fc9558b5579842cc39274ae92b683f40245f74e04ca604bbb1f667cfde022039d5b18059fcb15aa1032609734831f3adb20c050a9b9f7972a16537eda433d8:922c64590222798bb761d5b6d8e72950