API #Bugbounty Tips

When you found API endpoint like “/api/v12/somthing” add “internal” to the route and check the respons.

Example:

Request:
/api/v12/users/<userID>
Respons: 403

Request:
“/api/v12/internal/users/<userID>
Respons: 200

After this respons you may find something else.
Good luck.