Decoding GraphQL: How to Map Hidden...

Decoding GraphQL: How to Map Hidden Vulnerabilities Antoine Carossio, Tristan Kalos GraphQL APIs offer flexibility and efficiency but often introduce security risks that remain hidden in the shadows. In this session, we’ll share findings from scann...

Decoding GraphQL: How to Map Hidden Vulnerabilities

Antoine Carossio, Tristan Kalos

GraphQL APIs offer flexibility and efficiency but often introduce security risks that remain hidden in the shadows. In this session, we’ll share findings from scanning GraphQL APIs, revealing vulnerabilities like schema leaks, brute-force risks, and GraphQL-specific "bomb" attacks.

https://bsidessf2025.sched.com/event/49d7000615ff8ff4f596ec2827277532