Aayush YadavDeveloper & ResearcherGet in touch

I build
systems that
hold up.

I’m a developer and security researcher, studying computer science at Bennett University. From building at IIT Kanpur to contributing to open source, I care most about understanding systems and making them better.

Aayush Yadav
Builder. Researcher. Always curious.Read my résumé

ONUS

View project
tryonus.tech
ONUS: overviewONUS: dashboardONUS: workflow
9:41▮▮▮
01 / 03 2026ONUSEight tools. One trail.

Parallel scanning modules normalize findings, preserving evidence and confidence.

EVIDENCE → FINDING → REMEDIATION
SCROLL TO EXPLORE

Valsec

View project
Valsec · local-first
Valsec: overviewValsec: dashboardValsec: workflow
9:41▮▮▮
01 / 03 2026VALSECMany vendors. One model.

Cisco, Juniper and Fortinet configurations become one shared schema.

DISCOVER → NORMALIZE → AUDIT
SCROLL TO EXPLORE

M30 Security Lab

View project
M30 · owned-device lab
M30 / SECURITY LABOWNED DEVICE
AndroidKotlin
LinuxBlueZ
GALAXY M30HCI · L2CAP
ControllerSCSC
EVIDENCE, NOT ASSUMPTIONS100 / 100 ECHOES
9:41▮▮▮
01 / 03 2026M30 SECURITY LAB100 out of 100.

L2CAP echo replies checked against a second phone’s HCI log.

OWNED DEVICE · DOCUMENTED EVIDENCE
SCROLL TO EXPLORE

All work

8 projects
tryonus.tech
ONUS — onus hero landing
Security, made understandable.Explore project
ONUS2026
Valsec · local-first
Valsec — valsec valsec overview
One network. A clearer picture.Explore project
Valsec2026
M30 / SECURITY LABOWNED DEVICE
AndroidKotlin
LinuxBlueZ
GALAXY M30HCI · L2CAP
ControllerSCSC
EVIDENCE, NOT ASSUMPTIONS100 / 100 ECHOES
A phone. A lab. A lot of curiosity.Explore project
M30 Security Lab2026
GALAXY M30 / BUILD PROVENANCE
+ CONFIG_BT_RFCOMM=y+ kernel → boot.img+ SHA-256 verified+ flash readback match
Five patches.
One traceable image.ANDROID · LINUX · RFCOMM
A patch trail you can verify.Explore project
M30 Kernel Diff2026
Exchange Simulator
Exchange Simulator — stock exchange simulator dashboard
Inside a market, order by order.Explore project
Exchange Simulator2026
PUBLIC CHANNEL RESEARCH / 2026
DiscoverAPI v3→Filtermetadata→ExportCSV
Find the signal.

Organize public channel data.

PYTHON · SELENIUM · TKINTER
Research, organized.Explore project
YouTube LeadGen2026
Meshery

Better, together.

OPEN-SOURCE CONTRIBUTIONS
Building in the open.Explore project
Meshery2026
BTFIRMWARE

Look a little deeper.

STATIC ANALYSIS / 2026
Understanding what’s inside.Explore project
Bluetooth Firmware2026
SECURITY RESEARCH / 2026

Findings, with
the receipts.

25 vulnerabilities reported across multiple programs.

25reports submitted
02Kickbacks.ai findings validated by the vendor
01$100 researcher award

Reports span ISRO (9, reported through CERT-IN), Meshery (2), Appwrite (2), Kickbacks.ai (2), DoIT (1), and Vercel/ESA via HackerOne and Intigriti (9 reports closed as duplicates). Kickbacks.ai publicly credited my work on its Security Acknowledgements page.

Explore my research
ALSO IN THE JOURNEY

Top 5% globally on TryHackMe, with a 124-day best streak.

Selected for HackPrinceton Fall 2026.

Listed in OWASP’s Vulnerability Scanning Tools directory: ONUS.

THE TOOLKIT

Skills across
the stack.

From an interface down to the controller, I like to understand how the parts connect.

01 / Languages

Python · C · Kotlin · Java · TypeScript · JavaScript · Bash · SQL

02 / Product & backend

Next.js · React · FastAPI · PostgreSQL · Redis · Celery · Docker · Ollama · Caddy

03 / Systems & research

Linux · Android · BlueZ · Bluetooth HCI/L2CAP/RFCOMM · Ghidra · JADX · Wireshark

04 / Security

Burp Suite · OWASP ZAP · Nmap · Nuclei · Nikto · CVSS v3.1 · GitHub Actions

THE WAY I WORKQuestion. Build.
Verify. Repeat.

Good engineering starts with curiosity.
Good research ends with evidence.

A LITTLE CONTEXT

Built with
experience.

Cybersecurity Project InternIIT Kanpur · Computer Centre

Jun – Jul 2026

Deputy Minister, Digital InfrastructureSCSET Student Cabinet · Bennett University

2026 – Present

Open-source ContributorMeshery · CNCF

2026
Hi, I’m Aayush. Scroll down and I’ll show you around.