Learn API Hacking!
Source: YouTube · John Hammond · published Mar 21, 2025 · 1:00:08
Just Hacking Training offers free and paid API, hardware, and cybersecurity resources, with Katie Pax leading hands-on education in API and hardware hacking. 0:30
Key Takeaways:
• Just Hacking Training provides over 40 free and paid resources, including courses, hackalongs, and Capture the Flag challenges, focusing on API security and accessible learning 2:35.
• Katie Pax specializes in API and hardware hacking, building projects like an automated filament labeler using ESP32s and APIs, demonstrating practical, real-world skills 10:50.
• A common API vulnerability is insecure direct object references (ID manipulation), where changing a simple integer ID exposes sensitive data 35:12.
• Attackers can exploit JWT cookies to access another user’s account by swapping session tokens, enabling cross-user interactions 42:23.
• Beginners should start with API basics, then progress to GraphQL and websockets, using manual exploration and tools like Burp Suite rather than brute force 16:32.
API hacking is accessible through simple tools and exploration—pressing buttons, inspecting network traffic, and testing endpoints—making it ideal for beginners. 44:16
Sources:
- 0:30 Overview of Just Hacking Training’s content and mission.
- 2:35 Details on course offerings and educational structure.
- 10:50 Katie Pax’s hardware and API projects and teaching philosophy.
- [35:12](https://www.youtube.com/watch?v=bWIegXZ75cY&
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
pressing the go live button fingers crossed we are all live and a okay okay doing the old Refresh on YouTube on LinkedIn on Twitter SLX on Twitch to hang out with everybody I think we're doing it thank you so much for coming to hang out my goodness gracious it is yet again another Friday another week another probably what is this this is the third week this is the third week of the month in which case hey we get together with uh some of our sweet allars over on the just hacking training side of the house now uh for folks that aren't tracking or aren't as familiar look let me be straight up let me be totally forthcoming just hacking training is the other Venture extra project another spinning plate uh that we're having fun with to be able to share more education more content more training m…