https://thexssrat.medium.com/rest-api-goat-project-hacking-while-chaining-postman-into-burp-suite-46fb4988e10