I will buckle down and focus on API pentesting