https://mazinahmed.net/tags/graphql/Recent content in Graphql on Mazin AhmedHugoenWed, 16 Sep 2026 00:00:00 +0000https://mazinahmed.net/blog/attacking-graphql-apis-owasp-pnw-2024/Wed, 16 Sep 2026 00:00:00 +0000https://mazinahmed.net/blog/attacking-graphql-apis-owasp-pnw-2024/<p>I spoke at OWASP AppSec Days Pacific Northwest 2024 in Vancouver about attacking GraphQL APIs.</p> <p>The talk covered a range of GraphQL attacks and advanced attack vectors, along with the security considerations that are beyond the traditional checklists.</p> <h2 id="slides" class="relative group">Slides <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100"><a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700" style="text-decoration-line: none !important;" href="#slides" aria-label="Anchor">#</a></span></h2><ul> <li><strong>PDF:</strong> <a href="https://github.com/mazen160/public/raw/master/documents/Attacking%20GraphQL%20APIs%20-%20OWASP%20AppSec%20Days%20Pacific%20Northwest%202024.pdf" target="_blank" rel="noreferrer">Attacking GraphQL APIs - OWASP AppSec Days Pacific Northwest 2024.pdf</a></li> <li><strong>PowerPoint:</strong> <a href="https://github.com/mazen160/public/raw/master/documents/Attacking%20GraphQL%20APIs%20-%20OWASP%20AppSec%20Days%20Pacific%20Northwest%202024.pptx" target="_blank" rel="noreferrer">Attacking GraphQL APIs - OWASP AppSec Days Pacific Northwest 2024.pptx</a></li> </ul> <h2 id="speaker-preview" class="relative group">Speaker Preview <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100"><a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700" style="text-decoration-line: none !important;" href="#speaker-preview" aria-label="Anchor">#</a></span></h2><p>The conference published a short speaker preview ahead of the talk.</p>