<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>hellkid.dev — Writeups</title><description>Long-form writeups by Alessandro Ciotti.</description><link>https://hellkid.dev/</link><language>en-us</language><item><title>Website API vs Mobile API</title><link>https://hellkid.dev/writeups/website-api-vs-mobile-api/</link><guid isPermaLink="true">https://hellkid.dev/writeups/website-api-vs-mobile-api/</guid><description>How I bypassed rotating Hawk ID token on StubHub sniffing the mobile App traffic.</description><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>mitmproxy</category><category>API Reverse Engineering</category></item></channel></rss>