https://www.appclonescript.com/what-is-api-penetration-testing-methodology/