Skip to content

Releases: CYBWithFlourish/GraphqlNomad

v1.0.1

18 Jan 06:22

Choose a tag to compare

🎉 Release Notes: GraphQL Nomad v1.0.1

📅 Release Date

January 18, 2026


🆕 What's New

🎨 Comprehensive Documentation Overhaul

  • Completely rewritten README.md with extensive documentation including:

    • Detailed feature descriptions with categorization (Discovery, Fingerprinting, Schema Introspection, etc.)
    • Comprehensive installation guide with multiple options (PyPI, npm, pipx, source)
    • 8+ real-world usage examples covering common scenarios
    • Interactive shell command reference with examples
    • Troubleshooting section for common issues
    • Security considerations and best practices
    • Use case sections for different user types (pentesters, bug bounty hunters, developers, DevOps)
  • New SETUP.md development guide added covering:

    • Project structure and architecture
    • Development workflow
    • CI/CD pipeline details
    • Code quality standards
    • Common issues and solutions
  • Demo added: Integrated asciinema recording to showcase tool capabilities

📚 Enhanced Wordlists

  • NEW: graphql-endpoint-1018.txt - Massive wordlist with 1,018 GraphQL endpoint paths
  • NEW: graphql-endpoint-500.txt - Medium-sized wordlist with 500 common paths
  • NEW: graphql-endpoint-335.txt - Curated wordlist with 335 essential paths

These wordlists significantly improve endpoint discovery success rates across various GraphQL implementations including:

  • Shopify Admin API endpoints (all versioned APIs from 2021-2025)
  • Hasura, Apollo, Prisma, Strapi, Directus endpoints
  • Cloud provider specific paths (AWS, Azure, GCP)
  • CMS integrations (WordPress, Drupal, Magento)
  • Version-specific paths (v1-v20)

🔧 Bug Fixes & Improvements

Code Quality

  • Fixed critical linting errors identified by flake8
  • Removed unused import (urlparse from urllib.parse)
  • Cleaned up code formatting and whitespace issues
  • Fixed .npmignore configuration to prevent publishing unnecessary files

Configuration

  • Fixed: npm configuration error caused by repository-level .npmrc file
  • Added .npmrc to .gitignore to prevent future conflicts
  • Improved .gitignore with comprehensive Python project patterns

Build & CI/CD

  • Updated CI workflow name from "GraphQLNomad CI/CD" to "GraphQLNomad CI"
  • Improved CI pipeline to test module execution (python -m graphqlnomad)
  • Added test for command-line entry point (graphqlnomad --version)
  • Enhanced dependency installation using editable mode (pip install -e .)
  • Fixed Build Status badge link in README

Package Structure

  • Cleaned up empty line in graphqlnomad/__init__.py
  • Improved package organization and file structure

📦 Distribution

PyPI Package

  • Package name: graphqlnomad
  • Install: pip install graphqlnomad or pipx install graphqlnomad

npm Package

  • Package name: graphqlnomad
  • Install: npm install -g graphqlnomad
  • Note: npm package is a wrapper that requires Python and pipx

🐛 Known Issues

  • Introspection Disabled: Tool cannot bypass endpoints with introspection disabled (this is by design for security)
  • Flake8 Warnings: Some non-critical style warnings remain (69 warnings) but all critical errors are resolved

📊 Changes Summary

Category Changes
Documentation Complete README overhaul, new SETUP.md, demo added
Wordlists 3 new comprehensive endpoint wordlists (1,853 total paths)
Bug Fixes npm config fix, linting errors resolved, import cleanup
CI/CD Improved testing, better dependency management
Configuration Enhanced . gitignore and .npmignore

🔗 Links


🙏 Acknowledgments

Special thanks to:

  • GitHub Copilot for automated documentation and code quality improvements
  • The security community for feedback and testing

📝 Upgrade Instructions

From PyPI:

bash
pip install --upgrade graphqlnomad
# or
pipx upgrade graphqlnomad

From npm:

bash
npm update -g graphqlnomad

From Source:

bash
cd GraphQLNomad
git pull origin main
git checkout v1.0.1
pip install -e .

🎯 What's Next?

See our issues page for planned features and improvements.

Happy GraphQL Hunting! 🚀

v1.0.0

20 Sep 22:02
3f32f58

Choose a tag to compare