Merge pull request #40 from D-Ace0/detection_enhancement

detection enhancement
dolevf · Jun 21, 2024 · 7443fd2 · 7443fd2
2 parents fef68a2 + d99eee7
commit 7443fd2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/graphw00f/helpers.py b/graphw00f/helpers.py
@@ -71,6 +71,9 @@ def possible_graphql_paths():
     '/v1/graphiql',
     '/v2/graphiql',
     '/v3/graphiql',
+    '/graphql/v1',
+    '/graphql/v2',
+    '/graphql/v3',
     '/api/graphql',
     '/api/graphiql',
     '/console',

diff --git a/graphw00f/lib.py b/graphw00f/lib.py
@@ -34,7 +34,7 @@ def check(self, url):
     if response.get('data'):
       if response.get('data', {}).get('__typename', '') in ('Query', 'QueryRoot', 'query_root'):
         return True
-    elif response.get('errors') and (any('locations' in i for i in response['errors']) or (any('extensions' in i for i in response))):
+    elif response.get('errors') and (any('locations' in i for i in response['errors']) or any('extensions' in i for i in response['errors'])):
       return True
     elif response.get('data'):
       return True