iiinova — where your digital self keeps evolving

Katie Paxton-Fear @insider.phd · 04/10/2025

Check out the latest Paged Out! Zine (page 22 under hardware) and you’ll find an article written by me about my little eink labelling project and the highs and lows of learning to CAD, solder and program an ESP32, how hard can it be?

080

Katie Paxton-Fear @insider.phd · 04/10/2025

This course is 100% new content, designed for all skill levels. We start with "What is an API?" and go all the way from recon to reporting. It includes videos, written guides, exercises, and a new, realistic lab environment to practice in. The hands-on lab is free on GitHub!

120

Katie Paxton-Fear @insider.phd · 04/10/2025

I've spent a lot of time thinking about the best way to teach API security from the ground up for beginners. Today, I'm excited to launch the result: My brand new API Hacking course on JHT. It's built to give you a deep, foundational understanding of how to test modern APIs. 🧵

2152

Katie Paxton-Fear @insider.phd · 03/10/2025

120

Katie Paxton-Fear @insider.phd · 03/10/2025

1101

Katie Paxton-Fear @insider.phd · 02/09/2025

Tomorrow I'll be live on this webinar chatting about Hacker Summer Camp with my boss. We'll recap everything that happened and all the talks we did, share our top moments and our highlights from this year as well as share Jayson's experience at his first hacker con! 1/2

Security Rulez: I took my boss to Hacker Summer Camp and here’s what happened on September 3rd, 2025 at 10:00 AM PT

140

Katie Paxton-Fear @insider.phd · 18/08/2025

MCP is all anyone can talk about right now, but uhh what is it? And what do you actually need to know about the latest hyped AI thing? Join me tomorrow as I dig into it as we cover a TL;DR for security teams and perhaps why it might actually be industry changing

120

Katie Paxton-Fear @insider.phd · 18/08/2025

How to get rid of cash at DEFCON? Buy patches! Here are my DEFCON purchases (combined with a few I already had!

160

Katie Paxton-Fear @insider.phd · 13/08/2025

How do you find Reflected XSS in real programs? Well I'm glad you asked! This episode we're diving DOM-first into Javascript and covering how to find XSS in highly interactive applications like Angular!

130

Katie Paxton-Fear @insider.phd · 09/08/2025

Thank you everyone for coming to my DEEPLY unserious vibe coding talk, hopefully it inspires you to just learn how to program ESP32 rather than spend 4-5 hours trying to get it to produce working YAML

170

Katie Paxton-Fear @insider.phd · 07/08/2025

Sat 9th Aug @ 3pm Ill be sharing my brand new API hacking 2hour workshop at the Red Team Village, new labs, new methodologies and new content, it’s a one-stop-shop for API hacking!

100

Katie Paxton-Fear @insider.phd · 07/08/2025

Sat 9th Aug @ 2pm I’ll be running an interactive experience at the Blue Team Village Nook, part RPG, part improv show and part fun making threat modelling fun! Come join us

110

Katie Paxton-Fear @insider.phd · 07/08/2025

Fri 8th Aug @ 5:30pm I’ll be doing a talk about vibe eletronics-ing, and vibe coding and sharing some of my forays into the world of hardware hacking as a noob!

120

Katie Paxton-Fear @insider.phd · 07/08/2025

Fri 8th August @ 1:30pm I will be chatting about bug bounty + content creation with fellow creators NahamSec and Rhynorater at the Bug Bounty Village talking all things content, education and hacking (and how to balance the 3!)

110

Katie Paxton-Fear @insider.phd · 07/08/2025

Fri 8th Aug @ 12:30pm my colleague Eaton will be presenting his API hack that allowed him to remotely start a car, check it out at the Car Hacking Village on creator stage 3 (I’ll be in the audience)

110

Katie Paxton-Fear @insider.phd · 07/08/2025

Also on Thurs 7th Aug @ 8pm I’ll be at the Semgrep party at Level Up @ the MGM Grand, registration is still open and we should have space for those who register on the day semgrep.dev/events/l...

110

Katie Paxton-Fear @insider.phd · 04/08/2025

Also on Wednesday 6th Aug, I will be on a panel at BlackHat: Bug Bounty Group Therapy: Confessions, Concerns, and Community Solutions at 1:30 pm located at Lagoon G, Level 2 to chat about what works (and doesn't) for bug bounty hunters www.blackhat.com/us-... 7/9

110

Katie Paxton-Fear @insider.phd · 04/08/2025

On Wednesday 6th Aug, I will be joining my colleague @shehackspurple for her coffee meet and greet, please do swing by 8:00 am - 10:00 am at the big Starbucks, Mandalay Bay, the big one, right next to the convention center! 6/9

251

Katie Paxton-Fear @insider.phd · 04/08/2025

Also on Tuesday 5th Aug, I will be at the Semgrep event at Omega Mart, selfishly I didn't finish it last year, and Semgrep has bought out the entire space soooo if anyone wants to come do it with me, please do! semgrep.dev/events/o... 5/9

100

Katie Paxton-Fear @insider.phd · 04/08/2025

Also on Monday 4th Aug at 12:00 I will be at the Lineaje Software Supply Chain Summit at the panel AI is Writing Code – But Who’s Watching the Machines at 12:50 chatting about what security looks like in the age of vibe coding and AI generated code www.lineaje.com/soft... 3/9

100

Katie Paxton-Fear @insider.phd · 21/07/2025

Recommended simply for the worlds weirdest souvenirs

050

Katie Paxton-Fear @insider.phd · 17/07/2025

Wondering where I'll be speaking this Hacker Summer Camp? Well here's the official schedule! I'll be speaking at the @BugBountyDEFCON, @IoTvillage @ DEFCON on friday. Then on saturday I'll be delivering a 2hr workshop on everything API hacking at the @RedTeamVillage 1/2

152

Katie Paxton-Fear @insider.phd · 08/07/2025

What kind of Hackybara are you? Come find me at Hacker Summer Camp and say hi for one (or an entire set) of these little guys, I’ll be at BlackHat, BSidesLV and DEFCON

3213

Katie Paxton-Fear @insider.phd · 26/06/2025

I am delighted to be apart of this panel at the @RUSI_org on the 7th of July, we'll be exploring @joetidy's world of teenager cyber criminals and answer the key question, how do we prevent teenage boys down this path in the first place 1/2

1103

Katie Paxton-Fear @insider.phd · 21/06/2025

Today I am at @BSidesLeeds as a special guest no pressure 😅 I’ll be talking about AI, APIs and the four horsemen of the AI apocalypse

080

Katie Paxton-Fear @insider.phd · 13/06/2025

DEFCON slides ✅ See you in Vegas!

150

Katie Paxton-Fear @insider.phd · 08/06/2025

I am truely honoured to be a finalist in the volunteer of the year category for the Cyber Security Woman of the Year Award alongside such impactful women. I will be a bit cheeky though and kindly request your vote if you have a minute or 2 today! 1/2

190

Katie Paxton-Fear @insider.phd · 07/06/2025

The council of elders will decide your fate

1100

Katie Paxton-Fear @insider.phd · 29/05/2025

Vibe coding is all AI Twitter is talking about, but what is it? If you've ever wondered how to let AI do the coding so you can focus on the vibes today's video is for you. Create the recon tools you've always dreamed of using even if your code isn't quite production ready 1/3

Sad robots in a sweatshop programming RESTful APIs. Text: Forcing AI to make me RESTful APIs

110

Katie Paxton-Fear @insider.phd · 10/05/2025

Is this a really dumb idea or a genius idea I have no idea

070

Katie Paxton-Fear @insider.phd · 01/05/2025

Pleased to announce I will be keynoting the first ever Hacking APIs Con at @apidays NYC! It's everything you wanted to know about hacking GraphQL (but didn't know how to Query)

160

Katie Paxton-Fear @insider.phd · 30/04/2025

Had a blast at the API security happy hour, and not just 'cause it was in a pub!🍻 Big thanks to all who shared how my content helped you - your stories mean the world to me!😊 #APIsecurity #RSAC2025

060

Katie Paxton-Fear @insider.phd · 29/04/2025

And I am on the floor at RSA! Want to pick up some InsiderPhD stickers or just come say hi 👋 I’ll be at the Traceable by Harness Booth 3202 (between the two halls by the escalators!)

030

Katie Paxton-Fear @insider.phd · 26/04/2025

Want to level up your API Hacking? I’m doing a Hands On API Hacking workshop tomorrow at 1pm at the Bug Bounty Village @BsidesSF if you’re feeling stuck with API hacking this is the workshop for you

052

Katie Paxton-Fear @insider.phd · 26/04/2025

Hanging out at the Bug Bounty Village @bsidessf listening to @jhaddix talk about how to approach hacking AI using real approaches from his pen tests ✍️✍️✍️

080

Katie Paxton-Fear @insider.phd · 26/04/2025

Has infosec had you feeling a bit off? A bit uncomfortable? Bit of a weird vibe? Why not relish those ominous feelings with some bad vibes of your own? Come say hi at @bsidessf and revel (or find a sticker on the outside tables)

040

Katie Paxton-Fear @insider.phd · 26/04/2025

010

Katie Paxton-Fear @insider.phd · 15/04/2025

Wanted to share the final product of my eink project (going to do a full video or maybe a few… this week), but heres a spoiler for the curious

180

Katie Paxton-Fear @insider.phd · 09/04/2025

In December Eaton set his sights on McDonald’s, and he cooked up an interesting menu of vulnerabilities, from essentially free food, to massive PII leaks. Curious how he did it? What to know how he pivoted once he got access? What about his API hacking toolkit? 1/2

160

Katie Paxton-Fear @insider.phd · 08/04/2025

UI is a WIP but this is where we’re at at the moment I have 3 more screens to design

040

Katie Paxton-Fear @insider.phd · 08/04/2025

Here is where I am with my ESP32 labelling project, you can scan an NFC tag and have it populate the label with filament details

1100

Katie Paxton-Fear @insider.phd · 20/03/2025

Just dropped another completely free API security lesson on JustHacking, this time we’re looking at WebSocket APIs. In this 30min lesson you’ll learn what a WebSocket is and the types of apps that use them, how to communicate to WebSockets and some of the security issues in them!

1127

Katie Paxton-Fear @insider.phd · 17/03/2025

It's actually super cool, here's the mechanism, the goal is to pull a loop of yarn through the previous loop

110

Katie Paxton-Fear @insider.phd · 17/03/2025

Are you interested in API security, no fluff, no marketing just technical API experts sharing what they know? The eyJ webinar series is just that, I am joined by my colleagues for an hour of deep technical analysis, breakdowns of breaches and the latest in API security tooling 1/2

Mar 18, 2025 3PM PST/6PM EST
Portswigger Top Web Hacking Techniques 2024
Katie Paxton-Fear, Anjum Ahuja, Roshan Piyush

241

Katie Paxton-Fear @insider.phd · 16/03/2025

Just completed my second exciting project - a 3D printed knitting machine for socks! Check out it out! I do need to do some manual processing to finish the socks off since I am just making a big tube, but this is going to really speed up vanilla socks!

3332

Katie Paxton-Fear @insider.phd · 12/03/2025

This is my box of CAD failures

120

Katie Paxton-Fear @insider.phd · 12/03/2025

I can tell I’m improving at CAD because this only took 2 failures not 20

160

Katie Paxton-Fear @insider.phd · 11/03/2025

150