Introduction
When programming a tool for a dynamic security scan of an API, you need a way to know what requests you can send, with what parameters and in what order so you can have maximum API coverage to improve the scan quality. The whole point is to generate legitimate