Mobile Client Rest API's are often a good attack vector because developers often allow mobile client connections to go through fewer server side security checks.
Tooooo high to write up a tutorial but here are some tools with links, most of them are free
Maybe at a later date I can make a tutorial, but rn I am too lazy
Tooooo high to write up a tutorial but here are some tools with links, most of them are free
Maybe at a later date I can make a tutorial, but rn I am too lazy
SERVICES NOT HQ 
