denniskniep / gqlraider Goto Github PK

I am running into a "Not a JSON Object" error.

My JSON is wrapped with square brackets [ ].

It would probably help to use JsonElement.getAsJsonArray() instead of JsonElement.getAsJsonObject() here:

https://github.com/PortSwigger/graphql-raider/blob/0d2a8484716f2975745f99d357b538c1aa5e4949/src/main/java/extension/gql/GqlRequestParser.java#L24

hi ,
It seems it's not working in new version of burpsuite

The extension can only be installed through the BAP if you have the Professional edition of Burp Suite.

Downloading the JAR and installing it manually seems to work (no info on the error tab) but the GQLRaider tab doesn't show up.

First of all: Thanks a bazillion for this extension! I has helped me a lot in understanding GraphQL when I encountered it for the first time in a webapp test!

One thing I find really hard with GraphQL and Burp, is that you only have this one endpoint. So when you look at your proxy history, telling what is what is hardly possible.

What do you think adding something like "query: Queryname" in the comment field?