Hacking APIs and Cars: You need to learn this in 2023!

You need to learn how to hack APIs in 2023. This is the future battlefront! Ignore this at your own peril.

// MENU //
00:00 ▶️ Coming up
00:44 ▶️ Intro
00:53 ▶️ Alissa Knight introduction and background
02:36 ▶️ Published author and filmmaker
03:30 ▶️ Alissa Knight YouTube channel
05:02 ▶️ Book on API hacking
06:05 ▶️ The definition of hacking
10:25 ▶️ How to approach hacking
14:10 ▶️ The importance of learning
16:07 ▶️ How to start hacking APIs
22:54 ▶️ "The Desire"
25:35 ▶️ Recommended certifications
28:35 ▶️ Understanding Networking fundamentals
30:04 ▶️ Do you have to be a programmer to hack?
33:09 ▶️ Mastering tools
34:33 ▶️ Hacking APIs
38:43 ▶️ Shift left security, shield right
40:15 ▶️ Bank app developed by marketing team
42:51 ▶️ Smart phone takeover
45:10 ▶️ How to learn to hack APIs
48:11 ▶️ Process on how to hack APIs
55:05 ▶️ Implementing authorization and authentication
56:43 ▶️ APIs in nuclear plant systems
58:52 ▶️ Wifi pineapple
01:01:23 ▶️ Securing APIs in cars
01:03:18 ▶️ "Exciting times"
01:05:45 ▶️ Conclusion

// David's SOCIAL //

// Alissa's SOCIAL //

// Katie Paxton-Fear //

// David Sopas //

// Hyperfocus daily task sheet //

// BOOKS //

// MY STUFF //

// SPONSORS //

api
apis
postman
burpsuite
hacking
hacking cars
hacking connected cars
hacking api
cyber security
information security
sans institute
cybersecurity training
cyber security training
information security training
cyber
hack
privacy
nsa
oscp
ceh

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

#hacking #infosec #cyber

[CyberNancy]

Alissa said: “know how something works.”

After my 20 years and hundreds of cases, I would say that statement is at the center of great advice.

[maddluvme]

Alissa thank you so much for finishing that quote! I have been saying that for years! Even tried to make that statement during interviews and NO one knew that! I am twining with you right now!

[texasblaze]

I am finding that this community is really feeding my desire to learn new things. I have always liked figuring out how stuff works, and computers have always been the big black box but not anymore. I've been slowly learning more and more and the enthusiasm and encouragement this community provides has been really positive. The more I learn about cyber stuff, the more it will help me in my (non-cyber) career and is bringing back some interest and enthusiasm to the burnout I've had with it. I am learning ways to think about stuff that I might not have previously. And I like how there are so many different ways people have learned things in non linear ways. Keep it coming!

[mazahirhussain]

This is the best so far. Love it. Thank you for summing-up 20+ years of insights in 1 hour.

[dabela]

Thank you David, your education levels and methods are amazing. There are many people who are experts on their topic, but then cant teach it. You are a master of both. Thank you. (Alissa, thank you for this super informative session)

[ahirnimesh]

this is best podcast video till the date on this channel, She spoke about reality.
We always neglect the basic fundamentals in IT while learning.

[davidbombal]

// MENU //
00:00 ▶ Coming up
00:44 ▶ Intro
00:53 ▶ Alissa Knight introduction and background
02:36 ▶ Published author and filmmaker
03:30 ▶ Alissa Knight YouTube channel
05:02 ▶ Book on API hacking
06:05 ▶ The definition of hacking
10:25 ▶ How to approach hacking
14:10 ▶ The importance of learning
16:07 ▶ How to start hacking APIs
22:54 ▶ "The Desire"
25:35 ▶ Recommended certifications
28:35 ▶ Understanding Networking fundamentals
30:04 ▶ Do you have to be a programmer to hack?
33:09 ▶ Mastering tools
34:33 ▶ Hacking APIs
38:43 ▶ Shift left security, shield right
40:15 ▶ Bank app developed by marketing team
42:51 ▶ Smart phone takeover
45:10 ▶ How to learn to hack APIs
48:11 ▶ Process on how to hack APIs
55:05 ▶ Implementing authorization and authentication
56:43 ▶ APIs in nuclear plant systems
58:52 ▶ Wifi pineapple
01:01:23 ▶ Securing APIs in cars
01:03:18 ▶ "Exciting times"
01:05:45 ▶ Conclusion


// David's SOCIAL //

// Alissa's SOCIAL //

// Katie Paxton-Fear //

// David Sopas //

// Buy Hak5 Pineapple here //

// Hyperfocus daily task sheet //

// BOOKS //

// MY STUFF //

// SPONSORS //

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[superkool]

Five minutes in and I absolutely love her! “I’m trying to cram as many lifetimes as I can into my own lifetime” what an awesome quote! I LOVE that philosophy. LIVE A LIFE OF A THOUSAND LIVES.

[xxyz]

Best interview yet 👏 more books to add to my list. Have already followed you on everything, excellent job both of you.

[seeker]

couple of things for newer devs

1. Never hard code API keys or tokens in your application. Use ENV variables

2. Sanitize form data

3. Test application before moving to production (test route logics, check middlewares, always use verified vetted packages etc...)

[gregm.]

A other great video David!! A big thank you to yourself and Alissa for putting this together! 👍

[fernandorose]

Alissa would be the perfect mentor for this and other courses in a live environment. She connects very quickly. Brilliant to listen to.

[bashirabbas]

David you’re doing a great job always. You have the best videos on YouTube and thank you for changing our lives David..👍

[gameversia]

I've done multiple David's courses on Udemy and I loved him right away, very hands-on and meticulous
Alissa is by far, your Best guest. She is an absolute gem, what a character! 😊
I do relate to a lot of stuff that you guys have mentioned - I'm born in 87'

I feel very privileged to have grown in the best times to be a kid and best to be a teenager and a young adult when technology entered our lives, and be part of the whole process.
Since my kids, will experience a very different world in their youth, we're more connected, and yet we're more disconnected than ever - remote working, automation, AI, social media, I mean I could go on and on.

[mastersplinter]

One of your best videos to date! Damn bruh you sure ask some of the best questions.
I love how you break everything down into simple concepts.

[ebratz]

What a bold talk! Best spent hour of this year on YT so far! This was awesome! +1 sub!

[mashhood]

Thanks David for interviewing such valuable person on your channel i personally learned a lot from this video as a software engineering student will be looking forward more into API and stuff like that ❤️ you made my day thanks ❤️

[haireeizzam]

I'm at a loss for words David. You content is really pure gold. Would love to know more above ICS/SCADA hacking (how to learn about them), IoT and cars hacking

[nelaina]

I def found your channel at the right time. with the excellent content and engaging interviews. ..you are like the rockstar guidance counselor. I feel like I have a path since finding your channel.

I have to say, I love her!!! In one hour she spoke to my brain and heart. I am fascinated and craving more.

Your guests bring varied backgrounds, experience, and personalities, but a commonality is that they are genuinely encouraging and giving people, who love and care deeply about what they do and want to see others succeed. So much to learn as a beginner, but there are many starting points, and ways to just tinker on your own.

( PS I love that Alissa touched on "writing" notes vs typing. I'm a note writer, for sure...it how I learn.)
Thank you so much for an incredible interview, again.

[chillydickie]

these interviews are awesome. Its always exciting to be able to hear from people deep in industry.
I grew up not having any friends or families who understand all these things and had to seek all this knowledge by myself. Back then it was also not acceptable to be reading about these kind of stuff because of the negative perception around "hacking". I was just curious about how things work.