Learn API Hacking with InsiderPhD!

Learn API Hacking with InsiderPhD!

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 John Hammond 👥 2.2M 📅 October 3, 2025 ⏱ 59 min 👁 7K 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

APIhackingcybersecuritytrainingInsiderPhD

Summary

In this livestream, John Hammond announces the release of a new API hacking course by Katie Paxton-Fear (InsiderPhD) on the Just Hacking Training platform. The video begins with announcements about upcoming events, including Bsides Chicago workshops and the Huntress CTF. Katie joins to discuss her background as a former developer turned hacker and her motivation for creating a structured course to consolidate her scattered educational content. She introduces the course, which covers REST, GraphQL, gRPC, and LLM APIs, and includes videos, quizzes, and hands-on labs. A key highlight is the free open-source lab ‘Gentle Giants Adoption Agency’, a deliberately vulnerable application built with a JavaScript frontend and API backend, designed to simulate real-world API hacking scenarios. Katie demonstrates using Burp Suite with the PwnFox extension to color-code requests for efficient multi-account testing. The conversation touches on tool preferences, comparing Burp Suite and Caido, and emphasizes the importance of structured learning for cybersecurity. The video serves as both a promotional showcase and a brief tutorial on API hacking fundamentals.

168 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into API hacking, particularly through the demonstration of the vulnerable lab and the discussion of practical tools like PwnFox. Katie’s expertise is evident, and her argument for structured learning is compelling. However, the content is largely promotional, with limited in-depth technical explanations. The argumentation is solid but not heavily evidence-based, relying more on anecdotal experience than on rigorous scientific or technical proof.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite specific sources, but it references the course and the free lab on GitHub. The title accurately reflects the content. The scientific rigor is moderate; while the information is practical and based on real-world experience, it lacks formal citations or references to academic or industry standards. The promotional nature of the video may bias the presentation, but the technical content appears accurate.

148 words

Title / Content Match

The title accurately reflects the content, which focuses on API hacking and features InsiderPhD.

Quality & Reliability

7/10

The video features a recognized security researcher (Katie Paxton-Fear) and discusses practical API hacking techniques. The content is based on her experience and a newly released course. However, it is primarily promotional and lacks deep technical detail or verifiable sources.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • Just Hacking Training — Platform hosting the API hacking course.
  • Huntress CTF — Mentioned as a running CTF for October.
  • Gentle Giants Adoption Agency (GitHub) — Free vulnerable lab for API hacking practice.

Concurring Sources

Contribution & Novelties

The video introduces a new structured course on API hacking, consolidating scattered knowledge into a comprehensive curriculum. The free lab ‘Gentle Giants Adoption Agency’ provides a realistic environment for hands-on practice. The discussion of tools like PwnFox offers practical tips for efficient API testing.

Pour aller plus loin :

  • OWASP API Security Top 10 — Official list of common API vulnerabilities.
  • GraphQL — Query language for APIs, often a target for attackers.
  • Burp Suite — Popular web vulnerability scanner and proxy tool.

82 words

Radar Profile

The radar profile shows moderate scores across all dimensions, with slightly higher quality and reliability scores. This indicates a balanced but not exceptional video, with room for more technical depth and source citation.

Reliability 7/10

💬 No comments provided.