XESXOR logoXESXOR
WriteupsCoursesLabsStagesMentorshipPro
← Back to Courses/Web Pentest
IntermediateFREE8 hours

Finding GraphQL Endpoints

// VULNERABLE: GraphQL introspection + deep query (DoS) + missing auth on field

Enroll for free to track your progress through this course.

Curriculum (16 lessons)

  1. 1. Finding GraphQL Endpoints
  2. 2. Exploiting Unsanitized Arguments
  3. 3. Discovering Schema Information
  4. 4. Bypassing
  5. 5. Bypassing Rate Limiting Using Aliases
  6. 6. GraphQL CSRF
  7. 7. Preventing GraphQL Attacks
  8. 8. What Is GraphQL?
  9. 9. How GraphQL Works
  10. 10. What Is a
  11. 11. What Are
  12. 12. Components of Queries and Mutations
  13. 13. Subscriptions
  14. 14. Introspection
  15. 15. Best Practices & Detailed Takeaways
  16. 16. Introspection Query (Detailed)

Course price

Free

  • 16 lessons
  • Lifetime access
  • 0 students enrolled
Sign In to Enroll
XESXOR logoXESXOR

Elite cybersecurity & coding platform. Pro writeups, expert-led courses, live virtual classrooms, and a thriving hacker community.

Platform

  • Writeups
  • Courses
  • Labs
  • Stages
  • Pro Subscription

Account

  • Sign In
  • Create Account
  • Dashboard

© 2026 XESXOR Platform. All rights reserved.

Privacy•Terms•Contact