https://justice-reaper.github.io/posts/API-Testing-Lab-3/
Finding and exploiting an unused API endpoint - Justice-Reaper