Find hidden fields and access gaps in APIs.
What it does
Guides API security testing to uncover hidden fields, batching weaknesses, and authorization gaps.
When to use it
Use when GraphQL is present or REST documentation suggests optional, deprecated, or undocumented fields.
How to use it
Give it an API to test; it investigates schema discovery, hidden parameters, and batching-related security weaknesses.
What you provide
- an API to test
Latest review
What you need · 0
No setup requirements listed.
Access · 1
This skill
GraphQL endpoints
Read
Queries GraphQL schema information