58  graphw00f(1) - Kailash Tool Reference

58.1 graphw00f

graphw00f - GraphQL server engine fingerprinting utility.

Layer CLASSIC
Category c-03-web-application-assessment
Safety class safe
Licence BSD-3-Clause
Upstream github.com/dolevf/graphw00f

58.1.1 NAME

graphw00f - GraphQL server engine fingerprinting utility.

58.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

# Custom Headers
HEADERS = {'User-Agent':'graphw00f'}

# Custom Cookies
COOKIES = {"PHPSESS":"DEADBEEF"}

58.1.3 DESCRIPTION (upstream)

graphw00f - GraphQL Server Fingerprinting * How does it work? * Detections * GraphQL Threat Matrix * Prerequisites * Installation * Configuration * Example Usage * Fingerprinting GraphQL * Detecting & Fingerprinting GraphQL * Support & Issues * Resources graphw00f (inspired by wafw00f) is the GraphQL fingerprinting tool for GQL endpoints, it sends a mix of benign and malformed queries to determine the GraphQL engine run

58.1.4 SEE ALSO

ref: pin - verified 2026-10-14