Approach #1


  • import open api def → specify yml → add target url Issue is that token may be expired and we may not get the desired results

Approach #2


  • Go to manual explore option → target url and launch browzer → continue with target →use the app throughly → start spidering after you get a token → active scan → attack mode on

Will get more vulns - still no where close