---
id: 287
title: "Find GraphQL API vulnerabilities, with Burp Suite Professional"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/find-graphql-api-vulnerabilities-with-burp-suite-professional"
published_at: "2023-07-04 13:00"
tags: ["api-security", "graphql", "burp-suite-professional", "scanning", "introspection"]
phying_url: "https://phying.com/item/287"
lang: en
---

# Find GraphQL API vulnerabilities, with Burp Suite Professional

## Summary

Burp Suite Professional adds GraphQL scan checks that find known and hidden endpoints, detect enabled introspection and Apollo suggestions, and flag endpoints that fail to validate content types.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2023-07-04 13:00
- **Original:** https://portswigger.net/blog/find-graphql-api-vulnerabilities-with-burp-suite-professional
- **Phying News:** https://phying.com/item/287