inql - InQL is a robust, open-source Burp Suite extension

项目说明

InQL v6.1.2 - Burp Extension for Ad GraphQL Testing

![Doyensec Research Island]()
!GitHub
!GitHub release (latest by date)
!GitHub Release Date
![de ahead by]()
![GitHub issues by-label]()
![GitHub issues by-label]()

<img align="right" width="200" src="docs/inql.png">

:rocket: Introduction

Welcome to InQL, an open-source GraphQL testing tool. This tool provides features designed to enhance your GraphQL testing experience, making it more efficient and effective.

We appreciate your trust in InQL. Happy testing!

:star2: Key Features

The InQL user interface is equipped with three primary components: the *Scanner*, the *Batch Queries*, and the *Engine Fingerprinting* tab

:mag_right: Scanner

!Scanner

The *Scanner* is the core of InQL, where you can analyze a GraphQL endpoint or a local introspection schema file. It auto-generates all possible queries, mutations, and subscriptions, organizing them into a structured view for your analysis.

:white_check_mark: Customizable Scans

InQL offers the flexibility to customize your scans. Adjust the depth of generated queries or the number of spaces used for indentation. You can also perform 'Points of Interest' scans to detect potential in the GraphQL schema.

:white_check_mark: Points of Interest Analysis

After running a Points of Interest scan, you are presented with a rich data set co a of potential . You can enable or disable these categories according to your needs.

:white_check_mark: Circular References Detection

InQL implements circular reference detection. After analyzing the schema, it displays potentially queries in the scanner results view.

:white_check_mark: Enhanced Interactions with Burp

InQL seamlessly integrates with Burp, enabling you to generate queries directly from any GraphQL request in Burp. You can also send auto-generated queries to other Burp tools for further analysis.

:white_check_mark: Custom Headers

You have the ability to set custom headers per domain, with the domain list auto-populated from obser.

:crossed_swords: Batch Queries

The *Batch Queries* tab lets you run batch GraphQL attacks, which can be useful for circum poorly implemented rate limits.

:memo: Burp's Nati Editors

Burp's nati editors now come with an additional 'GraphQL (InQL)' tab, pro an efficient way to view and modify GraphQL requests. It also supports schema highlighting for better readability.

:crossed_swords: GraphiQL and GraphQL

InQL now implements GraphiQL and GraphQL servers. You can send the analysed schame into them to enhance the analysis e!

:point_up: Engine Fingerprinting

This tab allows you to scan a GraphQL URL to retrie about the backend ser.

:construction: Schema Bruteforcer

This scanner is designed to recreate the schema when introspection is disabled. It is based on Clair CLI tool, using regex pattern matching to disco details.

:arrow_down: Installation

To successfully install InQL, ensure you meet the following requirements:

Burp:

Support is only provided for the most recent of Burp.

Compatible with both "Professional" and "Community" editions.

Java:

The Montoya API needs Java 17 or later.

:computer: Building the InQL extension from git

1. Install Java 17+, for example in Debian-based distros:

2. Install our build tool - Taskfile:

2. Clone the repo and pull submodules:

3. Build the InQL extension:

This should produce a file named InQL.jar or similar in the root of the repo. Load it into Burp
as a Ja.

De en

If you want to contribute to the project, no special en is needed. You can simply re-build the project every time you implement a change.

To speed up the work on the code, you might want to auto-rebuild the extension whenever you make a change. Just run
kotlin task with the --watch / -w flag and you're good to go:

:handshake: Contributing

InQL thrives on community contributions. Whether you're a de, researcher, designer, or bug hunter, your expertise is in to us. We welcome bug reports, feedback, and pull requests. Your participation helps us continue to improve InQL, making it a stronger tool for the community.

Interactions are best carried out through the Github issue tracker, but you can also reach us on social media (). We look forward to hearing from you!

:busts_in_silhouette: Contributors

A special thanks to our contributors. Your dedication and commitment have been instrumental in making InQL what it is today.

Current:

Maintainer: Bartłomiej Górkiewicz -doyensec (Github)

Contributor: Sa (Github)

Historical:

Author: Andrea Brancaleoni (Twitter) / thypon (Github)

Maintainer: Andrew Konstantinov (Twitter) / (Mastodon)

Contributor: Matteo Oldani (Github)

List of other contributors: AUTHORS

This project was made with support of Doyensec.

!Doyensec Research

项目信息

开发语言：Kotlin

Star 数：1808

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。