• Brute-Force Urls with gobuster
• Scan with nmap

API Discovery with Kiterunner

## commands
1-choosing wordlist
$ kr wordlist list

2-basic scan
$ kr scan <taregt_url> -A=apiroutes-230528
-A=apiroutes-230528:1000 the :1000 means you’ll be using the first 1000 lines of the wordlist instead of the entire wordlist