API

Methodology

• Find API path

• Fuzz all possible values

• Understand how the API works and how to interact with it

• Discover Endpoint via source code

Useful

Understand API

Explore All API options / read documentation (Export to Postman ?)

Fuzzing

Fuzz each location and investigate if more parameters

/<api>/<directory>/<endpoint>?<parameter>=<value>&<second-parameter>=<second-value>

Discover via Source code

Check page source code and try discovering something useful (hidden endpoint, ...)