Skip to content
View phra's full-sized avatar
💻
root@localhost ~#
💻
root@localhost ~#

Organizations

@pugbo @BolognaJS @BolognaTechScene @preboot @pinojs @iftxt @d0nkeys

Block or report phra

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
phra/README.md

Hey 👋, I'm phra!

LinkedIn Twitter GitHub

📝 Read my latest research and articles on my blog: phra.github.io

About Me

GIF

I'm Francesco Soncina, a Security Researcher and software enthusiast based in Amsterdam, NL, with a Bachelor's Degree from the University of Bologna.

I love bridging the gap between offensive security and modern software engineering, combining a deep passion for InfoSec, Artificial Intelligence, JavaScript/TypeScript ecosystems, and low-level systems programming.

  • 🛡️ Red Teaming & Offensive Security: I currently work as an Ethical Hacker / Red Teamer at @ABNAMRO. I challenge the resilience of internal infrastructure and production software by simulating dedicated adversaries and executing worst-case attack scenarios—ensuring security countermeasures and detections are implemented proactively.
  • 🤖 AI & Automation: I am currently focused on exploring and building automated, agentic AI workflows, leveraging autonomous agents to solve complex engineering and security challenges.
  • 💻 Software Engineering & Architecture: Beyond breaking things, I care deeply about how software is built. My main interests include Functional Reactive Programming (FRP), DevOps, System Administration, Agile practices, and crafting a great Developer Experience (DX).
  • 🎤 Public Speaking & Community: I enjoy sharing my findings with the community by speaking at conferences and meetups about bleeding-edge security research and emerging technologies.
  • 🏴‍☠️ Capture The Flag: Arrr! I am a proud member of the now-retired @d0nkeys CTF team.

Languages and Tools

GitHub Stats

My Skills

Stats

GitHub Stats

Pinned Loading

  1. jestjs/jest jestjs/jest Public

    Delightful JavaScript Testing.

    TypeScript 45.5k 6.7k

  2. rapid7/metasploit-framework rapid7/metasploit-framework Public

    Metasploit Framework

    Ruby 39.2k 15k

  3. PEzor PEzor Public

    Open-Source Shellcode & PE Packer

    C 2.1k 323

  4. d0nkeys/redteam d0nkeys/redteam Public

    Red Team Scripts by d0nkeys (ex SnadoTeam)

    PowerShell 702 129

  5. rustbuster rustbuster Public

    A Comprehensive Web Fuzzer and Content Discovery Tool

    Rust 559 64

  6. x0rro x0rro Public

    A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2

    TypeScript 137 15