https://www.daeplatform.com/api-security-testing-guide-by-the-xss-rat/