by Vampiire

A major 5 line efficiency hack for your GraphQL API Type resolvers
Photo by Karsten Würth (@inf1783)
[https://unsplash.com/photos/ZKWgoRUYuMk?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText]
on Unsplash
[https://unsplash.com/search/photos/efficient?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText]
Using Apollo Server and Postgres — Sequelize, we’ll create a proof of concept
exploiting the info parameter of the resolver function for a 94% reduct

# Summary
The `embedded_submission_form_uuid` parameter in the `/graphql` endpoint was vulnerable to a SQL injection. This allowed an attacker to extract information from the public and secure...

This is part 2 of a series of blog posts on the “hacks” of ReviewTrackers’ first hackathon. Checkout the first post of the series here.

Exposing GraphQL to Penetration Testers: Why Should You Care? Security Overview and Testing Tips