├── .dockerignore ├── .gitignore ├── Dockerfile ├── LICENSE ├── README.md ├── app.ts ├── config └── config.json ├── lib ├── gql │ ├── mutations │ │ ├── authentication.ts │ │ ├── create_post.ts │ │ └── secret_mutation.ts │ ├── schema.ts │ └── types │ │ ├── mutation.ts │ │ ├── post.ts │ │ ├── query.ts │ │ └── user.ts └── graphql-type-json.d.ts ├── migrations ├── 20190514175844-create-user.js ├── 20190514182937-create-post.js └── 20190514192801-create-associations.js ├── models ├── index.ts ├── post.js └── user.js ├── package.json ├── run.sh ├── seeders ├── 20190514193954-seed_users.js └── 20190514203133-seed_posts.js ├── static ├── assets │ └── 1 └── secret ├── tsconfig.json └── yarn.lock /.dockerignore: -------------------------------------------------------------------------------- 1 | node_modules 2 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | db.sqlite 2 | build/ 3 | node_modules/ 4 | -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/README.md -------------------------------------------------------------------------------- /app.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/app.ts -------------------------------------------------------------------------------- /config/config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/config/config.json -------------------------------------------------------------------------------- /lib/gql/mutations/authentication.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/mutations/authentication.ts -------------------------------------------------------------------------------- /lib/gql/mutations/create_post.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/mutations/create_post.ts -------------------------------------------------------------------------------- /lib/gql/mutations/secret_mutation.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/mutations/secret_mutation.ts -------------------------------------------------------------------------------- /lib/gql/schema.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/schema.ts -------------------------------------------------------------------------------- /lib/gql/types/mutation.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/types/mutation.ts -------------------------------------------------------------------------------- /lib/gql/types/post.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/types/post.ts -------------------------------------------------------------------------------- /lib/gql/types/query.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/types/query.ts -------------------------------------------------------------------------------- /lib/gql/types/user.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/lib/gql/types/user.ts -------------------------------------------------------------------------------- /lib/graphql-type-json.d.ts: -------------------------------------------------------------------------------- 1 | declare module 'graphql-type-json'; -------------------------------------------------------------------------------- /migrations/20190514175844-create-user.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/migrations/20190514175844-create-user.js -------------------------------------------------------------------------------- /migrations/20190514182937-create-post.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/migrations/20190514182937-create-post.js -------------------------------------------------------------------------------- /migrations/20190514192801-create-associations.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/migrations/20190514192801-create-associations.js -------------------------------------------------------------------------------- /models/index.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/models/index.ts -------------------------------------------------------------------------------- /models/post.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/models/post.js -------------------------------------------------------------------------------- /models/user.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/models/user.js -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/package.json -------------------------------------------------------------------------------- /run.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/run.sh -------------------------------------------------------------------------------- /seeders/20190514193954-seed_users.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/seeders/20190514193954-seed_users.js -------------------------------------------------------------------------------- /seeders/20190514203133-seed_posts.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/seeders/20190514203133-seed_posts.js -------------------------------------------------------------------------------- /static/assets/1: -------------------------------------------------------------------------------- 1 | Hello ! 2 | -------------------------------------------------------------------------------- /static/secret: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/static/secret -------------------------------------------------------------------------------- /tsconfig.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/tsconfig.json -------------------------------------------------------------------------------- /yarn.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ivision-research/vulnerable-graphql-api/HEAD/yarn.lock --------------------------------------------------------------------------------