[ Reverse Engineer · Automation ]

Alessandro Maisto

I take apart the systems that decide whether you're human, then automate whatever sits behind them.

currently reverse-engineering Akamai

scroll ↓

01 // about

For the past 6 years I've been reverse engineering bot protection systems: obfuscated JavaScript, custom virtual machines and fingerprinting logic, down to the last check.

On top of that I've built a lot of automation, like auto-checkout systems and similar tooling.

I hold a BSc in Computer Science from Sapienza University of Rome, where I'm now pursuing an MSc in Cybersecurity.

I work as an independent contractor.

  • 6+

    years in reverse engineering

  • 6

    languages

02 // what I do

Two sides of the same job: understanding exactly how a protection works, then automating whatever sits behind it.

reverse()

Reverse engineering

Understanding exactly how a protection decides who's human.

  • Deobfuscation

    Untangling heavily obfuscated JavaScript back into readable logic.

  • Custom VMs

    Lifting the bytecode virtual machines that protections hide their checks in.

  • Fingerprinting

    Mapping every signal collected, from canvas to sensor data, and how it's scored.

  • Tokens & cookies

    How protection cookies and tokens like _abck or _px3 are generated, validated and refreshed.

automate()

Automation

Turning that knowledge into tools that run on their own.

  • Auto-checkout

    Complete purchase flows in seconds, from cart to confirmation.

  • Monitors

    Restocks and price changes detected in real time, with instant notifications.

  • Scrapers

    Structured data from sites that really don't want to be scraped.

A few of the protections I've worked on

  • 0x00

    Akamai

    _abck · sensor_data

    [ analyzed ]

  • 0x01

    PerimeterX

    _px3 · _pxhd

    [ analyzed ]

  • 0x02

    reCAPTCHA v3

    grecaptcha.execute()

    [ analyzed ]

  • 0x03

    DataDome

    datadome

    [ analyzed ]

  • 0x04

    Cloudflare

    cf_clearance

    [ analyzed ]

03 // stack

  • Go
  • Python
  • JavaScript
  • WASM
  • Java
  • C

04 // education

  1. in progress

    MSc Cybersecurity

    Sapienza University of Rome

  2. graduated

    BSc Computer Science

    Sapienza University of Rome

05 // you

A small part of what a bot protection reads about you before deciding you're human.

device

browser

locale & network

behavior live

--score

    everything here runs in your browser, the score included · nothing is sent anywhere

    06 // contact

    Need someone who understands bot protection inside out?