api hacking cheat sheet