skip to content

Gaya KACI

cybersecurity student · web security researcher

Master’s student at Efrei Paris Panthéon-Assas Université. I work in web development and cybersecurity at Société Générale Assurance, where I research web security and build security tools.

view projectsget in touchread postsdownload cv (PDF, opens in new tab)

/paris/fr

about

I build security tools and web software, backed by experience in network and systems administration.

Outside work, I build small CLIs, browser tools, and AI projects. I work across Linux, macOS, and Windows, and usually read the source before the docs.

roleweb dev · cybersecurity
degreeM. cybersecurity, Efrei Paris Panthéon-Assas Université
locationParis, FR
langsfr · en

experience

roles, most recent first

  1. Web Cybersecurity Engineer

    Société Générale Assurance
    Sep 2025 – present
    • Reverse engineer anti-bot systems and browser fingerprinting, then tune browser identity (user agents, technical fingerprints) to keep automated processes stable.
    • Build Python automation for complex web workflows: API integration, session management, and resilient scripts with timeout, retry, and data quality control.
    • Built a PowerShell tool (TUI + GUI) that classifies SonarQube SBOM files and generates vulnerability and CVE reports; triage with Qualys.
    • Automate cloud VM provisioning in PowerShell and diagnose environments via Bash across Azure and AWS.

  2. Network & Systems Administrator

    Dolce Hotel Versailles by Wyndham
    Jul 2024 – Sep 2025
    • Administered the network: VLANs, access points, and Cisco Meraki switches.
    • Deployed an Acronis backup server and vCenter virtualization; managed Active Directory, Microsoft 365, and Linux/Windows servers.
    • Handled user support and incident resolution; configured GLPI, xRDP, DNS, and DHCP.

projects

selected open-source work · demos where available

contributions

1754 contributions in the last year · via github

Less
More

writing

selected write-ups · 8 in total

  • Brave Origin: a subscription check without key pinning

    The Android Origin gate verifies subscription credentials against a public key the server hands back, with no issuer pinning. A local policy path never redeems them, so a forged credential is enough.
    · 4 minbravevoprfreverse-engineeringandroidsecurity-research

  • Tuning Patchright for fingerprint-stats pages

    Why AmiUnique and WebRTC leak tests need a different approach than bot-detection demos, and how WebSkrap handles them with native Chromium flags and opt-in context metadata instead of JavaScript spoofing.
    · 5 minbrowser-automationstealthpatchrightchromiumwebrtc

  • Passing Bot Detection in Headless Chrome

    Making headless Chromium clear the same bot-detection suite as headed mode with a simulated screen and a masked user agent, no JavaScript spoofing.
    · 4 minbrowser-automationstealthplaywrightchromium

  • Teensy BadUSB reverse shell POC

    HID keyboard injection on a Teensy 3.2 chains into a fileless PowerShell reverse shell on Windows.
    · 4 minbadusbpowershellwindowsred-team
browse all postsrss

skills

filled: regular use · outlined: occasional use

security
burp suitewiresharknmapmetasploitsnortsuricatahydrajohn
dev
rustpythontypescriptreactnext.jscasmjavascripthtmlcssphp
cloud / devops
dockerbashkubernetesazureawspowershell
scraping / automation
playwrightcamoufoxhttpxseleniumcrawleepuppeteerscrapybeautifulsoup
ai / ml
openroutertensorflowpytorchscikit-learnhugging face
data
postgresqlmongodbmysqlfirebaseoracle
os
debianarchkalimacoswindowsandroidios

certifications

linked rows open credentials or provider profiles

CCNACisco Networking Academy
Network Technician Career Path credential (opens in new tab)Cisco
Junior Cybersecurity Analyst Career Path credential (opens in new tab)Cisco
Ethical Hacker credential (opens in new tab)Cisco
Network Defense credential (opens in new tab)Cisco
Google SecOps credential (opens in new tab)Google Cloud Security

course badges

  • Networking Basics
  • Industrial Networking Essentials
  • Introduction to Cybersecurity
  • Introduction to IoT
  • Introduction to Modern AI
  • Digital Safety and Security Awareness
  • Cybersecurity Awareness Learner

contact

email works best

mailcontact@gaya.anonaddy.com
gitgithub.com/kacigaya(opens in new tab)
inlinkedin.com/in/kacigaya(opens in new tab)
xx.com/kacigaya(opens in new tab)
g.devg.dev/kacigaya(opens in new tab)