https://singularityfeed.com/api-security-testing-best-practices-for-penetration-testing-apis/