GraphQL Security Testing Without a Schema
blog.forcesunseen.com