⤷ Title: Mass Account Takeover of 29,000 Accounts by Abusing GraphQL
════════════════════════
𐀪 Author: Bryan Matthew
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #red_team #bug_bounty #penetration_testing #graphql #research
════════════════════════
𐀪 Author: Bryan Matthew
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #red_team #bug_bounty #penetration_testing #graphql #research
Medium
Mass Account Takeover of 29,000 Accounts by Abusing GraphQL
While testing a GraphQL endpoint, I noticed that introspection was enabled in production. Running an introspection query exposed the…
⤷ Title: GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
════════════════════════
𐀪 Author: johnnattakit 0xDD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:56:35 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #penetration_testing #vulnerability #graphql #cybersecurity
════════════════════════
𐀪 Author: johnnattakit 0xDD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:56:35 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #penetration_testing #vulnerability #graphql #cybersecurity
Medium
GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
TL;DR: GraphQL introspection is a built-in, spec-compliant feature that — when left enabled on production endpoints — gives attackers a…
⤷ Title: How GraphQL Mutation Aliasing Led to a $12,500 DoS Bug in HackerOne’s Account Recovery Flow
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 08:45:17 GMT
════════════════════════
⌗ Tags: #graphql #bug_bounty_writeup #infosec #bug_bounty #bug_bounty_tips
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 08:45:17 GMT
════════════════════════
⌗ Tags: #graphql #bug_bounty_writeup #infosec #bug_bounty #bug_bounty_tips
Medium
How GraphQL Mutation Aliasing Led to a $12,500 DoS Bug in HackerOne’s Account Recovery Flow
A small GraphQL behavior created a very real availability problem.
⤷ Title: A Practical Introduction to GraphQL Pentesting
════════════════════════
𐀪 Author: Amir Dehghan
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 12:55:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #graphql #api_security #web_security #penetration_testing
════════════════════════
𐀪 Author: Amir Dehghan
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 12:55:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #graphql #api_security #web_security #penetration_testing
Medium
A Practical Introduction to GraphQL Pentesting
Understanding GraphQL architecture, reconnaissance techniques, and common security vulnerabilities.
⤷ Title: Blind Extraction of Password Hashes via an Unauthenticated GraphQL Count Oracle
════════════════════════
𐀪 Author: M0n3m
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 17:21:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #graphql #hacking
════════════════════════
𐀪 Author: M0n3m
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 17:21:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #graphql #hacking
Medium
Blind Extraction of Password Hashes via an Unauthenticated GraphQL Count Oracle
High Severity Vulnerability with $XXX Bounty
⤷ Title: Writeup — Accessing private GraphQL posts
════════════════════════
𐀪 Author: praditya arga
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 14:42:11 GMT
════════════════════════
⌗ Tags: #burpsuite #cybersecurity #ctf #graphql #penetration_testing
════════════════════════
𐀪 Author: praditya arga
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 14:42:11 GMT
════════════════════════
⌗ Tags: #burpsuite #cybersecurity #ctf #graphql #penetration_testing
Medium
Writeup — Accessing private GraphQL posts
This lab shows a vulnerability in a GraphQL implementation where users can access sensitive fields because the queries are not properly…
⤷ Title: From GraphQL Introspection to Critical Data Exposure: Discovering Unauthenticated Access to KYC…
════════════════════════
𐀪 Author: savan-025
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 07:49:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #bug_bounty #graphql #ethical_hacking
════════════════════════
𐀪 Author: savan-025
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 07:49:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #bug_bounty #graphql #ethical_hacking
Medium
From GraphQL Introspection to Critical Data Exposure: Discovering Unauthenticated Access to KYC OTPs and Payment Records
Introduction
⤷ Title: GraphQL Hacking — The 2026 Goldmine
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #graphql #technology #hacking
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #graphql #technology #hacking
Medium
GraphQL Hacking — The 2026 Goldmine
What’s up everyone! Nitin here 👋
⤷ Title: The Silent Data Leak: Hardening Production Gateways Against GraphQL Introspection
════════════════════════
𐀪 Author: BizTech Pulse Hub
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 02:26:56 GMT
════════════════════════
⌗ Tags: #web_development #software_engineering #api_security #cybersecurity #graphql
════════════════════════
𐀪 Author: BizTech Pulse Hub
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 02:26:56 GMT
════════════════════════
⌗ Tags: #web_development #software_engineering #api_security #cybersecurity #graphql
Medium
The Silent Data Leak: Hardening Production Gateways Against GraphQL Introspection
The paradigm shift toward dynamic database architectures has fundamentally changed how modern web services communicate. For years, system…
⤷ Title: Excessive Data Exposure via Unauthenticated GraphQL Endpoint
════════════════════════
𐀪 Author: 0xPinocchioSec
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 09:20:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #graphql #web_security #cybersecurity_research
════════════════════════
𐀪 Author: 0xPinocchioSec
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 09:20:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #graphql #web_security #cybersecurity_research
Medium
Excessive Data Exposure via Unauthenticated GraphQL Endpoint
Bug Bounty Write-up | Information Disclosure | GraphQL Security