Did you know that not all APIs are RESTful? Me neither at some point in the relatively recent past! This talk will explore bits and bobs related to GraphQL. We'll look at how it works, how to find GraphQL endpoints, and look at some GraphQL exploit techniques from the lens of the OWASP Top 10.