On chapter 8 page 209 Listing 8-5, I can't make the example commix command work against the DVGA webapp. I'm not getting the same CLI questions when running commix compared to the book's example in Listing 8-5. I'm wondering which version of commix did you guys use for the book?
I don't understand what I'm doing wrong, did I mistype some characters, or did commix's latest versions break this example command?
# Trial 1
$ sudo commix --url="http://127.0.0.1:5013/graphql" --data='{"query":"query{systemDebug(arg:\"test\")}"}' -p arg
# Trial 2
$ sudo commix --url="http://localhost:5013/graphql" --data='{"query":"query{systemDebug(arg:\"test\")}"}' -p arg
# Trial 3
$ sudo commix --url="http://127.0.0.1:5013/graphql" --data='{"query":"query{systemDebug(arg:\"test \")}"}' -p arg --level=2
# Trial 4
$ python3 commix.py --url="http://127.0.0.1:5013/graphql" --data='{"query":"query{systemDebug(arg:\"test\")}"}' -p arg
# ERROR for all these tests, commix says that it didn't find any injection vulnerabilities with the arg entry point.