https://www.sharitsec.eu.org/2025/03/unmasking-api-vulnerabilities-how.html