Website API vs Mobile API
April 2026 · 2 minHow I bypassed rotating Hawk ID token on StubHub sniffing the mobile App traffic.
mitmproxy API Reverse Engineering
I'm Alessandro.
I forge things,
and figure out
why they work.
Computer Engineering student at Sapienza, Latina campus. Twenty-one years old. Most of what I know I learned by trying to automate things I wasn't supposed to, running into walls, and figuring out why the walls were there.
I spent five years as a reseller - not as a hustle, but as an education. Anti-bot systems, request signing, behavioral fingerprinting. The commerce was secondary; the engineering was the point.
Projects
product 2026
Numby
Ticket listings aggregator and real-time email scraping dashboard. Built for brokers, currently under development.
JavaScript API Reverse Engineering Supabase mitmproxy
website 2026
hellkid.dev
This website. Proudly built with Claude Code and Claude Design.
Astro Tailwind TypeScript JavaScript CSS Cloudflare
tool 2025
Toys Center ACO
Automated multi-account checkout software in Python, engineered for lightning-fast purchases on Toys Center.
Python Requests BeautifulSoup4 Pandas threading
infrastructure 2025
X²
Automated Python system that delivers real-time academic results via push notifications after parsing them from complex PDFs.
Python Pandas BeautifulSoup4 pdfplumber Flask Requests threading MySQL
Timeline
2018 
Limited sneakers
A friend mentioned SNKRS. Lost every raffle. Joined the reseller community instead of quitting and learned how the game actually worked.
2021
Jumped in
Joined a paid cookgroup. Started moving hyped pairs across Italy and Europe. Logistics, timing, margin.
2022
First code
Python + Requests + BeautifulSoup4. Built a school announcement scraper. Then I hit the Akamai wall trying to build a sneaker bot. Shelved it.
2024
Sapienza, Latina Campus
Started taking anti-bot systems seriously: Akamai & Cloudflare JS challenges, TLS fingerprinting and so on. In the meantime I started Computer Engineering at Sapienza, Latina campus.
2025
Automations
Instagram scraper for Pokémon drop accounts. Auto-checkout bot for an unprotected retailer, ran 24/7 until they added Cloudflare Turnstile.
2026 
Jumped out
Retired from reselling. Started Numby. Focus shifted to cybersecurity and reverse engineering as a career path, not a side hustle.
Writeups
all writeups →