Update Hidden_API_Functionality_Exposure.md

Readability maintenance KathanP19#3

Author: DotSlashTX

API_Testing/Hidden_API_Functionality_Exposure.md

@@ -9,16 +9,16 @@
 
 ## Steps to Perform This Attack :
 ```
-Step 1 : Capture the request into Burp, Send the request to repeater and intruder tab
-Step 2 : Add the endpoint into the intruder tab and add the payload from the word-list
-Step 3 : 1st use dictionary attack with sec-list on the Endpoint
-Step 4 : Either use your customized list or use the ones which i have provided in the above section
-Step 5 : Then simply start the attack, Start checking for 200 status
-Step 7 : Once their is 200 status OK, Start the recursive scan on the same endpoint for juicy information like swagger doc and so on.
+Step 1 : Capture the request into Burp, Send the request to repeater and intruder tab.
+Step 2 : Add the endpoint into the intruder tab and add the payload from the word-list.
+Step 3 : First use dictionary attack with SecLists (https://github.com/danielmiessler/SecLists) on the Endpoint.
+Step 4 : Either use your customized list or use the ones which I have provided in the above step.
+Step 5 : Then simply start the attack, start checking for 200 status.
+Step 7 : Once there is HTTP 200 OK status, start the recursive scan on the same endpoint for juicy information like swagger doc and so on.
 step 8 : Other method is to change the API version and try bruteforcing the same endpoint
 Eg: Redacted.com/api/v1/{Endpoint} ----- Redacted.com/api/v2/{Endpoint}
 ```
-* Note: Their will be minimum limits per request which will be assigned without API keys so make sure to utilize manual approach as much as you can,Then the rest can be automated for scanning the vulnerability in API with automated tools.
+* Note: There will be minimum limits per request which will be assigned without API keys so make sure to utilize manual approach as much as you can, then the rest can be automated for scanning the vulnerability in API with automated tools.
 
 ## Contributor:
 - [N3T_hunt3r](https://twitter.com/N3T_hunt3r)