Black Hat GraphQL : attacking next generation APIs / by Nick Aleks and Dolev Farhi ; foreword by Opheliar Chan.

Format:

Book

Author/Creator:

Aleks, Nick, author.

Farhi, Dolev, author.

Language:

English

Subjects (All):

GraphQL (Computer program language).

Query languages (Computer science)--Security measures.

Query languages (Computer science).

Penetration testing (Computer security).

Physical Description:

1 online resource (236 pages) : illustrations

Place of Publication:

San Francisco, California : No Starch Press, [2023].

Summary:

Web applications are increasingly using the query language GraphQL to share data, but the security of these useful APIs is lagging behind.Authored by the developers of widely used GraphQL security-testing tools, Black Hat GraphQL will teach you how to find and exploit flaws in this technology.Early chapters provide in-depth knowledge of GraphQL and its query language, as well as its potential security pitfalls.Readers will then be guided through setting up a hacking lab for targeting GraphQL applications using specialized GraphQL security tools.They will learn how to conduct offensive security tests against production GraphQL systems by gleaning information from GraphQL implementations during reconnaissance and probing them for vulnerabilities, like injections, information disclosure, and Denial of Service. -- Publisher

Notes:

Includes index.

Other Format:

Print version:

ISBN:

9781718502857

1718502850

OCLC:

1355042349