Approach #1


  • import open api def specify yml add target url Issue is that token may be expired and we may not get the desired results

Approach #2


  • Go to manual explore option target url and launch browzer continue with target use the app throughly start spidering after you get a token active scan attack mode on

Will get more vulns - still no where close