Krrish Bhanushali | API Security & Backend Engineering

krrish@shadowapi: ~

KB-OS shell v2.4 · type help or tap a command

$ whoami

Krrish Bhanushali

B.Tech Computer Engineering, K.J. Somaiya College of Engineering, Mumbai. Honours in Cyber Security & Forensics · Class of 2028.

$ cat motto.txt

"I build backend systems, then try to break them."

RUN:

sys_info.dat

Program: B.Tech Computer Engineering
Honours: Cyber Security & Forensics
College: K.J. Somaiya College of Engineering
CGPA: 8.2 / 10
Focus: Cybersecurity
Now: Building ShadowAPI & HoneyLens

Résumé.pdf GitHub

catalog: projects

ShadowAPI

Python · Security R&D

IN PROGRESS

API attack-surface discovery and security analysis platform. Finds undocumented ("shadow") APIs, detects drift between expected and observed behavior, and scores each endpoint's risk.

Attack-surface map (concept)

● documented● shadow

Discoveryshadow APIs

Driftdetection

Riskper endpoint

GitHub

HoneyLens

Cowrie · Python · PostgreSQL · Grafana

IN PROGRESS

Cowrie SSH honeypot and threat-intelligence pipeline. Captures attacker logins and commands, enriches and maps them to MITRE ATT&CK, and turns them into dashboards and shareable threat intel.

Capture→Enrich & map→Report

Sessionizing, GeoIP enrichment and ATT&CK mapping in Python
PostgreSQL store feeding 5 Grafana dashboards
Weekly HTML report with CSV, STIX and ATT&CK Navigator exports

5dashboards

ATT&CKmapping

STIX+ CSV export

GitHub

GST Invoice Scanner

FastAPI · Groq Llama 3.3 70B · Neon

LIVE

Reads PDF and image invoices with Llama 3.3 70B, extracts 15+ GST fields, runs 10+ compliance and fraud checks, and grades each invoice A to F from a 0–100 health score.

GSTIN validation, qty × rate = amount checks, CGST/SGST/IGST rules
Duplicate detection and an approval workflow on PostgreSQL

15+GST fields

10+checks

A–Fgrade

View live ↗ GitHub

Cineverse

Node.js · Express · PostgreSQL · Supabase

LIVE

Movie discovery app over the TMDB catalog, with search, filter, sort, pagination and trending endpoints, built for speed.

Supabase connection pooling on AWS ap-south-1
Debounced search and poster caching

8REST endpoints

500K+titles

98/100Lighthouse

View live ↗ GitHub

sys_mon: security

TryHackMe rankTOP 15%

Target: top 1% worldwide

Learning paths

Pre Security100%

Cyber Security 101~50%

TJCTF 2026429th / 1,000+

Team VRCHAMPION

cryptographyweb exploitationreverse engineeringforensics

Toolkit

WiresharkNetworkMinerAutopsyFTK ImagerNmap

ctrl_panel: skills

Languages & frameworks

C++PythonJavaScriptTypeScriptNode.jsFastAPIExpressNext.jsReactTailwind CSSHTML/CSS

Databases

PostgreSQLSupabaseNeon

Security & forensics

WiresharkNetworkMinerAutopsyFTK ImagerNmapCowrie

Tools & cloud

Git/GitHubAWSVercelNetlifyGitHub PagesGrafanaPower BI

printer: awards.prn

[1ST PLACE]2026

FTC Algo Trade CompetitionDesigned and backtested a trading strategy run under live market conditions.

[GOLD]2026

WorldQuant Brain5,000+ alpha points across multiple asset classes.

[TOP 15%]GLOBAL

TryHackMeClimbing toward the top 1%.

[429TH]2026

TJCTF 2026 · Team VRCHAMPIONOut of 1,000+ participants.

EPSON FX-80PAGE 1 OF 1

sh: contact.sh

$ cat contact.txt

EMAILkrrishbhanushali26@gmail.com

LINKEDINin/krrish-bhanushali [open ↗]

GITHUBgithub.com/VRCHAMPION [open ↗]

RÉSUMÉresume.pdf [download]

Mumbai, India (IST) · open to security & backend internships

$ exit