Pen test tips & tricks 1 CSRF in GraphQL and REST APIs - Attack and defend JSON endpoints Jul 23, 2025