@hacker_ had the ability to read everyone's support tickets for one of the largets cryptocurrency exchanges which could have given him access to user's personal data and accounts. This hub, will show you the basics of reverse proxy and API hacking
If you use any automation tools please only use the dictionary / SecLists found here to avoid wasting your time.