skip to content

Gaya KACI

cybersecurity student · web security researcher

Master's student at Efrei Paris Panthéon-Assas Université. Currently working in web development and cybersecurity at Société Générale Assurance doing web security research and building security tooling.

view selected workcontact meread research

/paris/fr

about

Cybersecurity-focused developer with a background in network and system administration, plus web development.

Day job at Société Générale Assurance: web security research against complex web targets, reverse-engineering anti-bot and bot-detection systems, and browser fingerprinting.

Outside work, I build small CLIs, browser tools, and AI side projects. Comfortable across Linux, macOS, and Windows. I usually read source before docs.

roleweb dev · cybersecurity
degreeM. cybersecurity, Efrei Paris Panthéon-Assas Université
locationParis, FR
langsfr · en

projects

selected open-source work · source and live demos where available

contributions

758 contributions in 2026 · via github

Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
Mon
Wed
Fri
Less
More

writing

5 entries · notes and write-ups

  • Unlock Brave Origin Without Paying
    The Android Origin gate verifies subscription credentials against a public key the server hands back, with no issuer pinning. A local policy path never redeems them, so a forged credential is enough.
    2026-06-30 · 4 minbravevoprfreverse-engineeringandroidsecurity-research
  • Tuning Patchright for fingerprint-stats pages
    Why AmiUnique and WebRTC leak tests need a different approach than bot-detection demos, and how WebSkrap handles them with native Chromium flags and opt-in context metadata instead of JavaScript spoofing.
    2026-06-07 · 5 minbrowser-automationstealthpatchrightchromiumwebrtc
  • Passing Bot Detection in Headless Chrome
    Making headless Chromium clear the same bot-detection suite as headed mode with a simulated screen and a masked user agent, no JavaScript spoofing.
    2026-06-03 · 4 minbrowser-automationstealthplaywrightchromium
  • Teensy BadUSB reverse shell POC
    HID keyboard injection on a Teensy 3.2 chains into a fileless PowerShell reverse shell on Windows.
    2026-05-07 · 4 minbadusbpowershellwindowsred-team
  • Skia Graphite compositing bug: Chromium on macOS
    A GPU rendering synchronization bug causing visual corruption on macOS, and how to fix it.
    2026-05-06 · 4 minmacoschromiumgpuelectron
browse all posts

skills

security
nmapmetasploitburp suitesnortsuricatawiresharkhydrajohn
dev
rustpythoncasmjavascripttypescriptreactnext.jshtmlcssphp
cloud / devops
dockerkubernetesazureawspowershellbash
scraping / automation
playwrightseleniumcrawleepuppeteerscrapybeautifulsoupcamoufoxhttpx
ai / ml
tensorflowpytorchscikit-learnhugging faceopenrouter
data
mysqlmongodbpostgresqlfirebaseoracle
os
debianarchkalimacoswindowsandroidios

contact

mailcontact@gaya.anonaddy.com
gitgithub.com/kacigaya(opens in new tab)
inlinkedin.com/in/kacigaya(opens in new tab)
xx.com/kacigaya(opens in new tab)