APPRENTICE - Exploiting an API endpoint using documentation
PRACTITIONER - Finding and exploiting an unused API endpoint
PRACTITIONER - Exploiting a mass assignment vulnerability
PRACTITIONER - Exploiting server-side parameter pollution in a query string
