Learn API Hacking with InsiderPhD!
Source: YouTube · John Hammond · published Oct 3, 2025 · 59:37
The video introduces Just Hacking Training's new API hacking course with Katie "insider" [PhD], providing an overview of cybersecurity education resources and demonstrating API security testing techniques 0:07-0:45. The course covers RESTful APIs, GraphQL, gRPC, and API security vulnerabilities, with over 50 videos and 5+ hours of content 8:01-8:23. Katie demonstrates how to identify access control vulnerabilities in APIs using Burp Suite, explaining her methodology of first understanding how an API works before attempting to exploit it 29:04-29:32. The video showcases a practical demo of finding broken object level authorization by modifying API requests to change data the user shouldn't have access to 41:05-41:23.
Key Takeaways:
• Just Hacking Training offers hands-on cybersecurity education with courses, challenges, and capture the flag competitions 0:07-0:45
• Katie's new API hacking course covers RESTful APIs, GraphQL, gRPC, and security vulnerabilities with over 5 hours of content 8:01-8:23
• Effective API security testing requires first understanding how the API functions before attempting to find vulnerabilities 29:04-29:32
• Access control issues are the most common vulnerability found in APIs, accounting for about 40% of discovered security issues 33:26-33:47
The video concludes with a practical demonstration of API vulnerability discovery that viewers can learn from through the new course.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Learn cyber security and focus technical training with just hacking.com where all-star instructors and industry experts provide hands-on affordable and practical learning across courses, free upskill challenges, hackalong training videos, and capture the flag competitions. There's always something to hack. With new content twice a month, all throughout the year, plus bimonthly live streams, you can sharpen your skills in our ondemand and interactive lab environments. Advance your career and level up regardless of your experience or budget. Forget all the noise and get to just hacking. Sign up now at just hacking.com. Woohoo. Hello. Hello everybody waving arms in celebration. Happy Friday. Goodness gracious. Happy cyber security awareness month. Good old October once again every year. It ha…