Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
GraphQLGrapper — Burp Suite extension to extract and collect GraphQL API endpoints from HTTP request history for security testing and reconnaissance. | Kitploit
Tools/GitHubGitHub/m19o/graphqlgrapper
ReconnaissanceWeb Application ExploitationAPI Security TestingInformation GatheringWeb SecurityPenetration Testing
GitHubm19o/graphqlgrapper

GraphQLGrapper

Burp Suite extension to extract and collect GraphQL API endpoints from HTTP request history for security testing and reconnaissance.

View Repository
21331 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

An extension to collect GraphQL functions from Burpsuite requests history

How to use

You need will need Jython standalone jar

  1. Go to Extensions tab
  2. Click on Add
  3. Choose GraphQLGrapper.py
  4. Now you can use it by right click on the target and choosing the extension

Result

image

Download Tool