0x22bb
/
hacktricks
mirror of https://github.com/carlospolop/hacktricks.git
1
2
Fork 0
Code Releases Activity

GitBook: [master] one page and one asset modified

This commit is contained in:
CPol 2021-03-13 17:41:22 +00:00 committed by gitbook-bot
parent dea5144ebf
commit f70fd05d22
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
.gitbook/assets/image (441).png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 17 KiB

14
pentesting/pentesting-web/graphql.md
View File

@ -62,16 +62,26 @@ In the introspection you can find **which object you can directly query for** \(
![](../../.gitbook/assets/screenshot-from-2021-03-13-18-17-48.png)
Flags object is defined below as:
Note that the type of the query "_flags_" is "_Flags_", and this object is defined as below:
![](../../.gitbook/assets/screenshot-from-2021-03-13-18-22-57.png)
Where you can see that the flags objects are composed by name and value. Then you can get all the names and values of the flags with the query:
You can see that the "_Flags_" objects are composed by **name** and .**value** Then you can get all the names and values of the flags with the query:
```javascript
query={flags{name, value}}
```
Note that in case the **object to query** is a **primitive** **type** like **string** like in the following example
![](../../.gitbook/assets/image%20%28441%29.png)
You can just query is with:
```javascript
query={hiddenFlags}
```
In another example where there were 2 objects inside the "_Query_" type object: "_user_" and "_users_".
If these objects don't need any argument to search, could **retrieve all the information from them** just **asking** for the data you want. In this example from Internet you could extract the saved usernames and passwords: