Packs

1 pack

Threat Intelligence Analysis

For threat analysts correlating IOCs, building campaign graphs, and producing intelligence reports.

9 skills · pack

Results for “graph-io”

3 skills

Identify and exploit Insecure Direct Object Reference (IDOR) or Broken Object Level Authorization (BOLA) vulnerabilities specifically within GraphQL APIs. This skill focuses on manipulating node IDs, changing variables, and utilizing aliases to access unauthorized data.

post-exploiting-microsoft-graph-with-graphrunner

Perform reconnaissance, persistence, privilege escalation, and data pillaging on Microsoft 365/Entra ID tenants via the Microsoft Graph API using the GraphRunner PowerShell toolset.

24.6k · bundle

performing-graphql-security-assessment

Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.

24.6k · bundle