Review on API Penetration Testing by John Kennedy

I like how they provide you with real world examples to help understand what is being tested, as well has some really neat tools that are easy for beginners/intermediates suchas Burp Suite etc.. Sometimes it's hard determining if an error exists or not because sometimes there can be so many different errors when testing certain APIs which makes finding them difficult! When creating tests we do get stuck but our support team usually helps us out pretty quickly once identified!! We have been able solve almost all issues this way- most commonly by using their website where its easier than having people try each method one after another until found success (sometimes multiple days).