Skip to main content

Andrax Pentester

Cyber Intelligence

Home Articles Tutorials Research Writeups Tools Resources SaaS About

Log in

Loading…

Andrax Pentester

Cybersecurity research, education, and tooling

All Systems Operational · Research Verified

Security Dispatches

Get notified when new 0-day disclosures and CTF writeups publish.

Email for newsletter

Intelligence

Articles
Research
Writeups
Tutorials
Security Tools
Resources

MCP Security

MCP Scanner
Server Directory
MCP Dorks Search
Browser Extension
Methodology
Scanning Policy
State of MCP
Developer API

Discovery

Search Index
Categories
Vulnerability Tags
RSS XML Feed
JSON API Feed
LLMs Knowledge (llms.txt)

Organization

About Project
Lead Researcher
SentinelReign
Platform Roadmap
Indian Armed Forces Tribute

Access

Apply as Researcher
Member Sign In
Create Account
Research Dashboard

Independent Security Network

Andrax Pentester operates as an autonomous cybersecurity laboratory under the SentinelReign research umbrella.

sentinelreign.com Our Mission

© 2026 Andrax Pentester. Open research and security education.

Strict Ethical Guidelines · Educational Purpose Only

Tag

AppSec

Published work tagged AppSec.

Items1

All Categories Articles Tutorials Research Writeups

TutorialWeb & API Security

Hands-On Tutorial: Auditing & Exploiting GraphQL API Vulnerabilities (2026 Edition): Introspection Bypasses, Alias Rate-Limit Bypasses, BOLA, and Depth DoS Defense

Hands-on masterclass on auditing and exploiting GraphQL API vulnerabilities (introspection bypasses, alias rate-limit bypasses, BOLA, depth DoS) with full runna…

Advanced

25 min lab