Api Testing

Portswigger Academy API Testing LABS Writeups:

Exploiting an API endpoint using documentation

Exploiting server-side parameter pollution in a query string

Finding and exploiting an unused API endpoint

Exploiting a mass assignment vulnerability

Exploiting server-side parameter pollution in a REST URL