REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure

REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure

Explore a conference talk that delves into the potential security vulnerabilities of GraphQL and how attackers can exploit them to target underlying infrastructure. Learn about the cons of GraphQL, including increased complexity and documentation challenges. Discover new attack methodologies, such as object reference attacks and mutations. Gain insights into debugging techniques, API vulnerabilities, and the importance of query cost analysis. Understand how hackers leverage GraphQL's features to their advantage and explore tools like AWS Security Toolkit and GraphQL Verb Extension. Examine real-world examples and common problems in software development related to GraphQL security.