Skip to content
View DonAsako's full-sized avatar
🔓
Breaking things
🔓
Breaking things

Highlights

  • Pro

Organizations

@opendataforge @WiredTeam

Block or report DonAsako

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DonAsako/README.md

Asako — CVE Hunter · Vulnerability Researcher · Red Teamer

Finding vulnerabilities, writing reports, annoying software responsibly.

I work in security, mostly on web applications. Alongside that, I build and contribute to open source.

TL;DR — I write things and I break things.

Selected work

  • Security advisories — disclosed vulnerabilities.
  • CSSinj — tool that exploits CSS injection to exfiltrate data from web applications.
  • Eskoz — Django project for building a multilingual blog.

Certifications

  • CPTS — Certified Penetration Testing Specialist · Hack The Box · 2026
  • CWES — Certified Web Exploitation Specialist · Hack The Box · 2025
  • CRTA — Red Team Analyst · CyberWarfare Labs · 2025

Stack

Arch Linux Python uv Pydantic Django PostgreSQL Docker Caddy Git

Profiles

Contact

  • Web — donasako.fr
  • Email — contact [at] donasako [dot] fr

Pinned Loading

  1. CSSinj CSSinj Public

    CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security postu…

    Python 4

  2. Eskoz Eskoz Public

    Eskoz is a Django-based project designed to help you quickly and easily create a multilingual blog, with a straightforward deployment process.

    Python 5