GraphQL Vulnerabilities

Recursos cross-platform para GraphQL Vulnerabilities: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

​

GraphQL Vulnerabilities

Esta página agrega los recursos para practicar GraphQL Vulnerabilities de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

​

Recursos curados

Fuente	Enlace
PortSwigger	https://portswigger.net/web-security/graphql

​

Máquinas HTB que practican GraphQL Vulnerabilities (1)

Máquina	SO	Dificultad
OverGraph	Linux	HARD

​

Labs PortSwigger que practican GraphQL Vulnerabilities (5)

Lab	Dificultad	Topic	Oficial
Accessing private GraphQL posts	APPRENTICE	GraphQL	Abrir
Accidental exposure of private GraphQL fields	PRACTITIONER	GraphQL	Abrir
Bypassing GraphQL brute force protections	PRACTITIONER	GraphQL	Abrir
Finding a hidden GraphQL endpoint	PRACTITIONER	GraphQL	Abrir
Performing CSRF exploits over GraphQL	PRACTITIONER	GraphQL	Abrir

​

Rooms TryHackMe que practican GraphQL Vulnerabilities (1)

Room	Dificultad	Tipo	Acceso	Oficial
Intro to GraphQL Hacking	EASY	Walkthrough	🔵 VIP	Abrir

---

← Volver al glosario completo

Última actualización: 2026-06-07