Identifying data and schema structures
We will end our chapter about API reconnaissance and enumeration by covering a subject as important as all the others. By successfully identifying an API’s data and schema structures, you can acquire even more information about the target. Once you have analyzed the API documentation and endpoints, you need to identify the data and schema structures that are used by the API. This information can be used to understand how the API works and to develop applications that interact with the API.
The API documentation should provide information about the data and schema structures that are used by the API. However, you may need to analyze the API responses to get a complete understanding of the data and schema structures.
Some APIs return JSON structures, whereas others prefer to encode responses in XML before sending them to the requester. As a matter of fact, XML was the preferred data transport format for some years because of its flexibility...
