https://kwesilarry1.github.io/tags/graphql-bookstore/Recent content in Graphql Bookstore on 0xWizardHugoen-usTue, 12 May 2026 18:47:35 +0000https://kwesilarry1.github.io/writeups/graphql_bookstore_api/Tue, 12 May 2026 18:47:35 +0000https://kwesilarry1.github.io/writeups/graphql_bookstore_api/<h2 id="introduction">Introduction</h2> <p>Hello, welcome back to my blog. In this writeup, I’ll walk you through how I was able to break the GraphQL Bookstore API developed by <a href="https://x.com/Dghost_Ninja">Ipsalmy</a>, one of my mentors in this field.</p> <p>You can find the lab here: <a href="https://api.graphqlbook.org/">https://api.graphqlbook.org/</a> and the Github Repository too here: <a href="https://github.com/DghostNinja/graphql-bookstore-API">https://github.com/DghostNinja/graphql-bookstore-API</a>.</p> <p>Don’t forget to star the GitHub repository to encourage him to create more awesome labs for the community. A special thanks also goes to <a href="https://www.linkedin.com/company/hackingapiswithdami">HAWD</a> for equipping me with practical API security skills through their intensive 12-week API program. That experience helped me approach this lab with the mindset of an attacker instead of just a tester. Now, enough with the warm-up. Let’s dive into the bookstore and start breaking things xD. <img alt="batman" loading="lazy" src="https://kwesilarry1.github.io/images/MEMES/batman.gif"></p>