Awesome

graphql-wordlist

The only graphql wordlists you'll ever need.

Built using more than 60k distinct GraphQL schemas, collected using Goctopus

Wordlists are available in ./wordlists directory. The complete wordlist (with every category) is ./wordlists/wordlist.csv.

Learn more about how we crafted the wordlist in our dedicated blog post: https://escape.tech/blog/graphql-security-wordlist

Categories

Words are counted by categories:

• word: the encountered word
• overall: the overall number of encounters of the word
• operationType: the word is the typename of an operation (QueryTypename, MutationTypename, SubscriptionTypename)
• operationField: the word is a field of an operation (a query, mutation, or subscription)
• queryType: the word is the QueryTypename
• queryField: the word is a query field
• mutationType: the word is the MutationTypename
• mutationField: the word is a mutation field
• subscriptionType: the word is the SubscriptionTypename
• subscriptionField: the word is a subscription field
• argument: the word is an argument name
• type: the word is a type name
• field: the word is a field name (operation or object field)

Statistics

The 20 most common words for each category:

overall

the overall number of encounters of the word

Complete wordlists:

• ./wordlists/overallWordlist.csv
• ./wordlists/overallWordlist.txt

operationType

the word is the typename of an operation (QueryTypename, MutationTypename, SubscriptionTypename)

Complete wordlists:

• ./wordlists/operationTypeWordlist.csv
• ./wordlists/operationTypeWordlist.txt

operationField

the word is a field of an operation (a query, mutation, or subscription)

Complete wordlists:

• ./wordlists/operationFieldWordlist.csv
• ./wordlists/operationFieldWordlist.txt

queryType

the word is the QueryTypename

Complete wordlists:

• ./wordlists/queryTypeWordlist.csv
• ./wordlists/queryTypeWordlist.txt

queryField

the word is a query field

Complete wordlists:

• ./wordlists/queryFieldWordlist.csv
• ./wordlists/queryFieldWordlist.txt

mutationType

the word is the MutationTypename

Complete wordlists:

• ./wordlists/mutationTypeWordlist.csv
• ./wordlists/mutationTypeWordlist.txt

mutationField

the word is a mutation field

Complete wordlists:

• ./wordlists/mutationFieldWordlist.csv
• ./wordlists/mutationFieldWordlist.txt

subscriptionType

the word is the SubscriptionTypename

Complete wordlists:

• ./wordlists/subscriptionTypeWordlist.csv
• ./wordlists/subscriptionTypeWordlist.txt

subscriptionField

the word is a subscription field

Complete wordlists:

• ./wordlists/subscriptionFieldWordlist.csv
• ./wordlists/subscriptionFieldWordlist.txt

argument

the word is an argument name

Complete wordlists:

• ./wordlists/argumentWordlist.csv
• ./wordlists/argumentWordlist.txt

type

the word is a type name

Complete wordlists:

• ./wordlists/typeWordlist.csv
• ./wordlists/typeWordlist.txt

field

the word is a field name (operation or object field)

Complete wordlists:

• ./wordlists/fieldWordlist.csv
• ./wordlists/fieldWordlist.txt