Web Application Penetration Test einer API