GraphQL

One open Introspection Query let me list the entire GraphQL schema. A real pentest case of a common but costly setup mistake.