GraphQL Pentesting Methodology

Hitting a GraphQL endpoint is a different job to testing REST — no routes to enumerate, just one URL and a type system hiding behi…