KG//krishgoel.dev PRE-ENGAGEMENT 000%

SESSION OPENED // TARGET: KRISH GOEL

Curiosity got me into computers. Breaking things (ethically) made me stay.

Krish Goel

Offensive security, in training.
Find the flaw. Understand the why. Make the system stronger.
B.Tech CSE (Cybersecurity), 2nd year, SRM University Delhi-NCR

Scroll to breach

$ whois krish-goel

RECON

IMAGE NOT YET ACQUIRED
Name
Krish Goel
Location
Delhi, India
College
SRM University, Delhi-NCR (Sonipat)
Course
B.Tech Computer Science Engineering, Cybersecurity
Year
2nd Year, Semester 3
Crew
Team NullXByte

How it started

My curiosity about computers gradually evolved into an interest in understanding how systems work, how networks communicate, and how vulnerabilities can be exploited. That led me towards Linux, networking, ethical hacking, and cybersecurity.

Day to day

I explore cybersecurity concepts, experiment with Linux and networking tools, develop software projects, automate workflows, and keep learning about system vulnerabilities and penetration testing.

$ nmap -sV -p- krish-goel

ENUMERATE

Nmap scan report for krish-goel
Host is up. Curious, and getting faster.

PORTSTATESERVICEVERSION
# languages
8000/tcpopenpythonfundamentals solid, still learning
31337/tcpopen|filteredclearning
5555/tcpopenkotlinproject experience
3000/tcpfilteredjavascriptexploring
22/tcpopen|filteredbashlearning
3306/tcpopensqlfamiliar with fundamentals
# security tooling
9929/tcpopen|filterednmaplearning
2002/tcpopen|filteredwiresharklearning
4444/tcpfilteredmetasploitexploring
8081/tcpopen|filteredbettercaplearning
6969/tcpopen|filteredaircrack-nglearning
# operating systems
1/tcpopenkali-linuxhands-on
2/tcpopenparrot-oshands-on
445/tcpopenwindows-11comfortable
80/tcpopen|filteredlinuxactively learning
5554/tcpopenandroidapp development

open used in real work open|filtered learning now filtered exploring

Service info, other tools:

$ msfconsole -q -x "show targets"

EXPLOIT 01/07

TARGET 01 UNDER DEVELOPMENT

AVPE

Autonomous Vulnerability Prioritization Engine

10k findings. What do we fix first?

An AI-powered cybersecurity platform that discovers vulnerabilities, analyzes security risks, prioritizes threats, and optimizes cybersecurity investment decisions. Being built to help organizations manage growing risk and make informed security spending calls.

Role Creator. My own project, built alongside my learning.

  • Python
  • AI/ML
  • Security frameworks
  • Vulnerability intelligence
  • Networking
  • Risk analysis

TARGET 02 TESTED

AI CCTV

Video Attendance System

Uses CCTV footage and computer vision to automate student attendance. Developed and tested over about two months, through multiple project rounds.

Role Project team member, Team NullXByte.

  • Artificial intelligence
  • Computer vision
  • Video processing

TARGET 03 BUILT, NOT YET DEPLOYED

FestFlow

Tech fest management platform

Runs a tech fest end to end: events, solo and team registration, QR check-in, automatic waitlists, judge scoring, and live results. Seats can't be oversold and nobody can register twice, because the rules are enforced inside Postgres. In a race test of 100 people for 10 seats, exactly 10 got in.

Role Developer.

Credits Akshay, Amrit, and Swastik.

  • Next.js
  • TypeScript
  • PostgreSQL
  • Tailwind CSS

TARGET 04 UNDER DEVELOPMENT

Canvas Nova

Android wallpaper application

Aggregates wallpapers from Wallhaven, Reddit, and NASA's Astronomy Picture of the Day, with Unsplash, Pexels, and Pixabay planned. A cache-first architecture using WorkManager is planned to improve network efficiency and cut battery drain.

Role Independent developer.

  • Kotlin
  • Jetpack Compose
  • Android Studio
  • REST APIs

TARGET 05 UNDER DEVELOPMENT

NULL//UTILITY

Windows desktop application

A parody utility app with 150+ deliberately useless computational tools. It simulates lengthy processing sequences before presenting obvious answers. Includes random loading messages, search and favorites, categorized tools, and a dark purple futuristic interface.

Role Independent developer.

  • Windows desktop development
  • UI/UX design

TARGET 06 PROTOTYPE

Dual-Axis Solar Tracker

Arduino hardware build

Automatically adjusts a solar panel's orientation using light sensors to maximize sunlight exposure, integrated with a solar-powered streetlight concept.

Role Hardware and software development team member.

  • Arduino UNO
  • C/C++
  • LDR sensors
  • Servo motors
  • Solar components
  • 3D printing

TARGET 07 BUILT, OPEN SOURCE

TheftGuard

Android anti-theft application

Puts its own PIN in front of the power menu, sounds a siren at forced full volume after three wrong PINs, and texts emergency contacts the phone's location and IMEI over plain SMS, followed by live location. It warns before a force restart and brings the alarm back after one. Works on any Android 16+ phone; tested on a Galaxy S23 FE and a OnePlus 12R.

Role Independent developer.

  • Kotlin
  • Android SDK
  • Accessibility services
  • Android Keystore

View on GitHub

Learning how systems work, discovering how they break, and figuring out how to make them stronger.

$ cat ~/.history | grep -i arena

PIVOT

80/ ~200 teams

CodeX 3.0

Advanced to the top 80 teams out of approximately 200 in a 36-hour hackathon at PIET, Panipat.

Independent builds

  • AVPE, cybersecurity platform
  • Canvas Nova, Android application
  • NULL//UTILITY, Windows desktop application
  • krishgoel.dev, this website
  • Multiple experimental software and hardware projects

Running processes learning right now

PROCESSSOURCE
NetworkingJeremy's IT Lab, CCNA fundamentals
Linux FundamentalsHands-on Linux and Kali Linux practice
Python ProgrammingSelf-learning and practical development projects
Cybersecurity & PentestingPractical experimentation with networking and security tools
Bash ScriptingSelf-learning

$ id: uid=1000(krish) gid=1000(student)

ESCALATE

  1. 01Networking fundamentalsTCP/IP & OSI, subnetting, DNS/DHCP, HTTP/S, Wireshark & NmapStudying now
  2. 02Linux & BashFilesystem & permissions, processes, scripting, KaliNext
  3. 03Python for securitySockets, requests & APIs, log processing, automationQueued
  4. 04Web securityOWASP Top 10, SQLi, XSS/CSRF, sessions, Burp SuiteQueued
  5. 05System & network securityActive Directory, enumeration, vuln assessment, access controlQueued
  6. 06ExploitationMetasploit, exploit research, privilege escalation, post-exploitationQueued
  7. uid=0Security engineeringDesign & build secure systems. Long game: offensive + defensive, purple teaming, AI + security.Objective

Become the person trusted to find the weakness before someone else does.

Why penetration testing

I want to understand systems from an attacker's perspective, identify weaknesses before malicious actors can exploit them, and develop the ability to assess and improve real-world security.

Where I'm aiming

  • Network penetration testing
  • Web application security
  • Red teaming
  • Infrastructure security
  • Offensive security research

What I'm learning next

  • Advanced networking
  • Web application security
  • Active Directory penetration testing
  • Linux internals
  • Privilege escalation
  • Exploitation techniques
  • Professional pentest methodologies

In 2 to 3 years: strong practical experience, a portfolio of real-world security projects, and the ability to independently assess and secure complex systems.

Not just interested in how technology works. Interested in what happens when it doesn't.

$ scp krish@krishgoel.dev:~/contact.txt .

EXFIL

krishgoel96@gmail.com
LinkedIn /in/krishgoel96 GitHub /notKrish96

TryHackMe not yet

Hack The Box not yet

Open to

  • Cybersecurity internships
  • Penetration testing opportunities
  • CTF teams
  • Open-source collaborations
  • Security research collaborations
  • Interesting development projects
krish@krishgoel.dev: ~interactive shell