Pentesting Graphql

Introspection Query

We can test for introspection query if it is enabled or not by using Burpsuite Extension Called GRAPHQL. A Normal GraphQL Request and Response Looks like below

now go to GRAPHQL at the top and then Right Click > GRAPHQL > SET INTROSPECTION QUERY and the Query will be auto Generated and we can see introspection enabled.