Kali LinuxAnalyzing Web Apps with DevToolsCapturing and Modifying Requests with Burp SuiteSetting Up FoxyProxyAdding the Burp Suite CertificateNavigating Burp SuiteIntercepting TrafficAltering Requests with IntruderCrafting API Requests in Postman, an API BrowserThe Request BuilderEnvironmentsCollectionsThe Collection RunnerCode SnippetsThe Tests PanelConfiguring Postman to Work with Burp SuiteSupplemental ToolsPerforming Reconnaissance with OWASP AmassDiscovering API Endpoints with KiterunnerScanning for Vulnerabilities with NiktoScanning for Vulnerabilities with OWASP ZAPFuzzing with WfuzzDiscovering HTTP Parameters with ArjunSummaryLab #1: Enumerating the User Accounts in a REST API