📄️ Configure an Intercept Proxy
You will need to configure your device to use an intercept proxy such as Burp Suite.
📄️ Web Application Backend Testing
Using the information collected so far, you should have a pretty good idea of what kind of environment the backend web server is running, and the URL’s that are used to access it. A full web application penetration test should be performed against the backend environment.