⤷ Title: Getting all info about my coworkers via unprotected GraphQL path
════════════════════════
𐀪 Author: CANITEY
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 08:36:25 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #graphql #graphql_hacking #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: CANITEY
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 08:36:25 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #graphql #graphql_hacking #bug_bounty_tips #bug_bounty
Medium
Getting all info about my coworkers via unprotected GraphQL path
A story about why implementing authorization controls on graphQL is a little hard
⤷ Title: Attacking GraphQL
════════════════════════
𐀪 Author: aleandro
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 13:52:41 GMT
════════════════════════
⌗ Tags: #graphql_hacking #hackthebox_writeup #red_team
════════════════════════
𐀪 Author: aleandro
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 13:52:41 GMT
════════════════════════
⌗ Tags: #graphql_hacking #hackthebox_writeup #red_team
Medium
Attacking GraphQL
⚠️ I suggest you solve this problem by yourself