https://blog.bugbusterslabs.com/api-penetration-testing/