Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIsMaurício Harley