Skip to content
View krishanumishra778's full-sized avatar

Block or report krishanumishra778

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
krishanumishra778/README.md

Typing SVG


LinkedIn Gmail HackerOne GitHub

🔐 About Me

class KrishanuKaundilya:
    role       = "CEH Master | VAPT Specialist | AI Security Researcher"
    location   = "Indore, MP, India 🇮🇳"
    experience = "2+ years hands-on VAPT"

    focus = [
        "Web App & API Penetration Testing",
        "AI / LLM Security & Prompt Injection",
        "DAST Scanner Rule Development",
        "Agentic Security Automation",
    ]

    certifications = [
        "CEH Master — EC-Council #ECC0285763419",
        "Certified Ethical Hacker v13 (CEH)",
        "CEH Practical",
    ]

    currently_learning = [
        "Active Directory Exploitation",
        "AI Red Team Methodology",
        "Network Pivoting & Lateral Movement",
    ]

    fun_fact = "I delivered VAPT training to law enforcement officers at CAPT Bhopal 👮"

🛡️ Certifications & Credentials

CEH Master CEH v13 CEH Practical

🚀 Open Source Security Tools

Tool Description Stack Stars
🎯 nuclei-template-library Custom Nuclei YAML templates from real VAPT engagements — IDOR, Business Logic, XSS, Missing Headers YAML · Nuclei ⭐
🔍 recon-automation-tool Full recon pipeline: Subfinder → httpx → Nuclei → HTML Report Python · BeautifulSoup4 ⭐
📄 vapt-report-generator JSON findings → Professional PDF + HTML VAPT reports Python · ReportLab ⭐
🧠 prompt-injection-toolkit 31 payloads for AI/LLM security — OWASP LLM Top 10 mapped Python · requests ⭐

🧰 Tech Stack & Tools

Pentesting & VAPT

Burp Suite Metasploit Nmap Nuclei SQLMap FFUF Nikto Wireshark

Programming & Scripting

Python Bash

AI / LLM Security

OWASP LLM Prompt Injection Claude Code

Recon & OSINT

Subfinder Shodan httpx Amass

Standards & Compliance

OWASP ISO 27001 CVSS v3.1 PTES

📊 GitHub Stats

GitHub Streak

🎯 Bug Bounty & Research

HackerOne

  • 🔴 IDOR — Independently identified unauthorized P2P trading history access via userId parameter manipulation on a cryptocurrency exchange platform (confirmed valid)
  • 🟠 Business Logic Flaw — Exchange API accepting negative/zero amounts returning HTTP 200 with invalid conversion results (confirmed valid)
  • 🔬 Both findings confirmed real-world exploitability via HackerOne

🎤 Speaking & Training

Event Topic Audience
🎓 CAPT Bhopal Ethical Hacking & Attacker Methodology Law Enforcement Officers
💼 Crawl Digitally Phishing Attack Awareness Corporate Team

📈 Activity Graph

Krishanu's github activity graph

🏆 GitHub Trophies

trophy

💬 "Break it before someone else does."

Profile Views

Popular repositories Loading

  1. recon-automation-tool recon-automation-tool Public

    Automated recon pipeline: Subfinder → httpx → Nuclei → HTML Report | Python, BeautifulSoup, dnspython

    Python

  2. nuclei-template-library nuclei-template-library Public

    Custom Nuclei YAML templates built from real VAPT engagements | IDOR, Business Logic, XSS, Missing Headers | OWASP Top 10 mapped

    Python

  3. vapt-report-generator vapt-report-generator Public

    Professional VAPT report generator: JSON findings → PDF + HTML | ReportLab | CVSS v3.1 scoring

    Python

  4. prompt-injection-toolkit prompt-injection-toolkit Public

    AI/LLM security testing tool | 31 payloads: Prompt Injection, Jailbreak, Leak, DoS | OWASP LLM Top 10

    HTML

  5. krishanumishra778 krishanumishra778 Public

    CEH Master | VAPT Specialist | AI Security Researcher