name : Yashwant Gokul P
role : Cybersecurity-focused CS undergrad
studying : B.Tech CSE (Cyber Security) · VIT Chennai · Class of 2029
based_in : Chennai, India
focus :
- Web exploitation & vulnerability assessment
- CTF challenge design (web, crypto, privilege escalation)
- Secure-by-default backends, sandboxing and container isolation
currently :
- Building isolated lab environments for hands-on exploit training
mindset : "Every feature is an attack surface until proven otherwise."|
Finding what breaks before someone else does.
|
Watching what code actually does at runtime.
|
Designing so the safe path is the default one.
|
|
Dynamic analysis sandbox for untrusted Python and shell scripts. Detonates a sample inside an isolated Docker container, traces process Security angle: behavioural malware analysis, kernel-level tracing, containment.
|
Dynamic CTF hosting platform. Every player gets their own containerised environment with dynamically generated flags, so flags cannot be shared and real exploits (privesc, SSTI, RCE) run safely. Ships a browser-based Kali terminal via Security angle: tenant isolation, challenge integrity, safe exploit execution.
|
|
AI security assistant driven from Telegram. Scans installed software for known CVEs, proposes patches and applies them only after confirmation, then produces a PDF security report. One agent validates every command before a second agent is allowed to act on it. Security angle: vulnerability management, human-in-the-loop remediation, command validation.
|
Real-time IoT gas-leak safety system. An ESP32 streams sensor data to a Flask backend that tracks the full incident lifecycle, fires Telegram alerts and Twilio emergency calls, and closes each incident with a PDF report sealed by a SHA-256 hash. Security angle: forensic reporting, data integrity, tamper-evident logs.
|
|
Credential vault with email OTP authentication, a master password, password generation, checks against a common-password list, and a timed account-recovery window. Security angle: authentication flows, credential hygiene, abuse protection.
|
Walkthrough of a CipherStrike web challenge: Security angle: information disclosure, enumeration, exploit automation.
|
More builds
| Project | What it is | Stack |
|---|---|---|
| CiviTrack | AI-powered civic issue reporting with geolocation, prioritisation and a RAG pipeline for decision support | RAG · Pinecone |
| Crypto App Pro | Privacy-first crypto tax calculator built at CodeZilla '25 — FIFO/LIFO gains and PDF reports | TypeScript · Vite · Tailwind |
| multimsg | Unified inbox bringing chats from multiple messaging platforms into one place | Node.js · Prisma · Docker Compose |
Security tooling
Languages
Platforms & dev tools
Technical Lead · V-Vortex Nov 2025 – Jan 2026
- Led technical and security operations for a multi-domain hackathon with 75+ teams and 350+ participants.
- Ran the security assessment of the event platform: reported privilege escalation, API data exposure and a business-logic flaw allowing unverified data storage, then helped with remediation.
- Evaluated JWT manipulation, IDOR and login-bypass risk before launch.
| 🚩 | Finalist — Yukthi 2.0 Cybersecurity CTF, conducted by Tamil Nadu Police |
| 🚩 | Finalist — Shaastra CTF, IIT Madras |
| 🛡️ | Top 15 — Cybersecurity domain, DataQuest 2.0 Hackathon (VIT Chennai) |
| 🧠 | Top 212 of 800+ teams — Internal SIH round, one of only 13 first-year teams |
| 💻 | TryHackMe Top 15% globally — 62+ rooms, 11 badges |
Open to security internships, CTF collaborations and challenge-authoring work. If you want something of yours tested, or a challenge built, reach out at yashwantgokul@gmail.com.
All security work shown here was done in authorised environments: CTFs, labs, and systems I was asked to test.