business-logic 2 API Pentesting: Evasion & Combining Techniques Dec 15, 2025 API Security: Improper Assets Management & Mass Assignment Dec 8, 2025