offensive-graphql skillC
offensive-graphql is agent-read markdown (skill) from snailsploit/claude-red: Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endpoint discovery, introspection abuse and blind schema reconstruction when introspection is disabled, authentication and authorization bypass through Relay node IDs and nested object traversal, injection via variables and directives, query batching for brute force and OTP bypass, denial of service through depth bombs and alias amplification, WebSocket subscrip.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Offensive GraphQL GraphQL consolidates an entire API surface behind a single endpoint, making it a high-value target during web application assessments. Unlike REST, where each route maps to a discrete resource, a GraphQL schema exposes every type, field, mutation, and subscription in one queryable structure. Attackers who obtain or reconstruct that schema gain a complete map of the application's data model before writing a single exploit. This skill walks you through each phase of a GraphQL engagement with concrete queries, tool invocations, and chaining patterns. ## Quick Workflow 1. Discover the endpoint -- probe common paths, inspect client-side JS bundles, check WebSocket upgrade headers. 2. Fingerprint the implementation -- use graphw00f to identify the engine and tailor payloads. 3. Dump or reconstruct the schema -- full introspection query; if blocked, field suggestion probing or clairvoyance. 4. Map the attack surface -- feed the schema into GraphQL Voyager or InQL. 5. Test authentication and authorization -- every query and mutation with no token, low-privilege, and cross-user tokens. …
Read the whole file at its exact version.
How to install
mdr add snailsploit/claude-red/offensive-graphql@git:20260825.1885f44mdr add snailsploit/claude-red/offensive-graphql@sha256:fb88732fb1cc0396Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_dyjly4klr7tmn6ja)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260825.1885f44 latest | 2026-08-25 | 1885f44 | 21,864 B | C | view · diff |
| git:20260825.8cffe5d | 2026-08-25 | 8cffe5d | 29,237 B | C | view · diff |
| git:20260506.70e0c89 | 2026-05-06 | 70e0c89 | 14,225 B | C | view |
Audit of the latest version
- fail: No link to a raw IP address (matched: http://169.254.169.254)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (21864 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
Source
snailsploit/claude-red · 6,831 stars · license MIT · pushed 2026-09-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_dyjly4klr7tmn6ja GET https://markdownregistry.com/api/v1/resolve?ref=snailsploit/claude-red/offensive-graphql GET https://markdownregistry.com/api/v1/blob/fb88732fb1cc0396df485f3616f237a9bf36a5473b19511ea178a06a5a4cec30
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
More from snailsploit/claude-red
Every file in snailsploit/claude-red