Application Penetration Test einer REST-API