I Gave Claude Access to My Hacking Traffic
Source: YouTube · NahamSec · published Oct 5, 2026 · 20:13
BLUF: The video demonstrates setting up a remote proxy infrastructure using a VPS and Kaido to route traffic to Claude AI, enabling automated API mapping and vulnerability discovery via MCP and skills 0:25.
Key Takeaways:
• The creator installs Kaido on a Hostinger VPS and tunnels traffic locally to allow Claude to access HTTP history without manual copy-pasting 1:51.
• Kaido's MCP server provides Claude with tools to search traffic and intercept requests, while Skills offer scripted workflows for repeatable tasks like SSRF testing 8:11.
• By analyzing JavaScript files from a test lab, Claude automatically created Replay tabs for various API endpoints, significantly speeding up reconnaissance 12:55.
• Claude successfully identified hardcoded secrets, such as Stripe keys, and PII patterns within the application's code and traffic 16:06.
• The setup allows for automated testing of authentication bypasses and other vulnerabilities by instructing Claude to drop auth tokens for specific endpoints 17:35.
Closing Statement: This setup transforms passive proxy logging into an active AI-assisted hacking workflow, allowing security researchers to offload repetitive reconnaissance tasks to AI while focusing on complex vulnerability analysis.
Sources:
- 0:25 Introduction to routing hacking traffic through Kaido to Claude.
- 1:51 Setting up a Hostinger VPS for remote proxy hosting.
- 8:11 Explanation of Kaido MCP vs. Skills.
- 12:55 Using Claude to map API endpoints from JS files.
- 16:06 AI discovery of secrets and PII in traffic.
- 17:35 Automating authentication bypass testing.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Everybody's building a hackbot right now, giving AI a target and let it poke around and see if it can actually find a bug. And if you were hacking between 2018 and 2022, this probably feels very familiar. But we're trying to do the same thing with VPS boxes, recon pipelines, and scanners, and a ridiculous number of templates. We automate everything we could, but somebody still had to sit there and drive. Now, the idea is to let the AI drive. So, I want to see how far I can get with that. I'm going to put Kaido on a server, route all of my hacking traffic through it, and connect Claude using Kaido's MCP and skills, and see if it works. If this works, Claude should be able to look through the requests I'm making, help map out an API, and set up replays for things worth investigating. I'll be…