Adding GraphQL Module

[nithisshs]

• To Find GET Method Enabled GraphQL
• Which helps in escalating to CSRF attacks

[Hannah-PortSwigger]

Hi.

Thank you very much for your submission!

Unfortunately, this BCheck is very similar to our existing native GraphQL scan checks.

Have you found that your BCheck returns results above and beyond any native issues?

[nithisshs]

Well it will have detection only based on GET based CSRF attacks on GraphQL

Attaching the following h1 report as a reference

https://hackerone.com/reports/1122408

[PortSwiggerWiener]

Thanks for your submission and your patience.

We've had a discussion internally and decided to accept this even though it duplicates some of the Scanner's capability. The check is nicely written and, as you pointed out, it is more restrained than the scanner's check.

[ps-porpoise]

👍