Sign in

Fran Donoso

@francisck.com
502 followers 180 following 158 posts

I'm an infosec person who currently works as the CTO of a security services firm. Have done DevSecOps, Red Teaming, and reverse engineering. I reversed some of the tooling leaked by the Shadow Brokers and spoke about it publicly

PostsRepliesMedia
Fran Donoso @francisck.com · 01/11/2025
I may have gone overboard on the Halloween goodies this year #halloween
6 boxes of full sized candy bars, tiny stuffed Halloween themed toys, and hot wheels.
030
Fran Donoso @francisck.com · 15/03/2025
Okay 3rd (and last post) someone in the linked GitHub issue noticed that all of the tags in the project have been pointed to the malicious commit. The malicious commit was made by a "renovate" bot - perhaps its creds were compromised? 3/2 github.com/tj-actions/c...
220
Fran Donoso @francisck.com · 15/03/2025
Image referenced above is attached to this post. The GitHub action ultimately outputs a double base64 encoded value that is the secrets it was able to extract. See the second image for what this output looks like in Github action logs (I blacked out some of the output). 2/2
110
Fran Donoso @francisck.com · 11/10/2023
The judge: Why was your cat already wearing a hacker hoodie?!?
000
Fran Donoso @francisck.com · 06/10/2023
Search for drinks in you camera roll
Fondue and someone grabbing bread with a bottle of wine in the backgroundA bottle of wine with mountains in the background
110