Damn Vulnerable GraphQL Application: a deliberately weak Flask and Graphene GraphQL API (a paste service) for learning GraphQL attacks, from introspection and batching denial of service to injection, SSRF and authorization bypass, in a beginner and an expert mode.
Not startedDockercommit d550203x86_64 · aarch64Secret
Solve the DVGA challenges listed on its solutions page.
The brief for this lab lives in its repository.