Finding vulnerabilities, writing reports, annoying software responsibly.
I work in security, mostly on web applications. Alongside that, I build and contribute to open source.
TL;DR — I write things and I break things.
- Security advisories — disclosed vulnerabilities.
- CSSinj — tool that exploits CSS injection to exfiltrate data from web applications.
- Eskoz — Django project for building a multilingual blog.
- CPTS — Certified Penetration Testing Specialist · Hack The Box · 2026
- CWES — Certified Web Exploitation Specialist · Hack The Box · 2025
- CRTA — Red Team Analyst · CyberWarfare Labs · 2025
- Web — donasako.fr
- Email — contact
[at]donasako[dot]fr




