Priyansh
Khandal
Cybersecurity researcher operating across bug bounty reconnaissance, SOC triage automation, AI red-teaming, and EVM smart contract auditing. Terminal-native, declarative by design, grounded in reproducible technical artifacts.
About Me
Cybersecurity student, SOC analyst, and penetration tester operating with precision and discipline. Work spans offensive bug bounty hunting, AI red-teaming with Garak and PyRIT, and EVM smart contract auditing on Immunefi and Code4rena. All environments are declarative, terminal-native, and operationally compartmentalized.
Active Operations
Recon Pipeline
Automated asset discovery and vulnerability scanning pipeline.
LLM Jailbreak Research
Multi-turn prompt injection and token smuggling research.
Smart Contract Audit
Reentrancy and logic flaw audits on Immunefi and Code4rena.
SIEM Alert Triage
Python-based alert enrichment and false-positive reduction.
WireGuard Kill-Switch
NixOS declarative WireGuard kill-switch configuration.
Adaptive LLM Router
FastAPI service that routes prompts across local and cloud LLMs.
Home-Manager Profiles
Declarative NixOS home-manager security tooling profiles.
Bug Bounty Tracker
Dashboard for tracking bug bounty submissions and yield.
Field Notes
The Hardening Guide for Android
For anyone running pentesting, bug bounty, or blockchain workflows off a daily-driver Android phone: no custom ROM, no root, no bootloader unlock. Just discipline.
Building a Recon Pipeline with Subfinder, Httpx & Nuclei
How I automated asset discovery and vulnerability scanning into a single declarative NixOS-managed pipeline that runs on every scope update.
Jailbreaking LLMs with Garak: What Actually Works in 2026
A practical walkthrough of multi-turn prompt injection, role-play escalation, and token smuggling techniques tested against GPT-4o and Llama 3.
Reentrancy Attacks: From Classic to Cross-Function Variants
Deep dive into reentrancy patterns in Solidity, how Slither and Foundry fuzz tests catch them, and a real Code4rena finding walkthrough.
SIEM Alert Triage at Scale: Cutting False Positives by 60%
Lessons from building correlation rules, tuning Sigma detections, and using Python to auto-enrich alerts with threat intel feeds.
Declarative OPSEC: Managing a Kill-Switch WireGuard Setup with NixOS
How I use Home Manager and WireGuard to enforce a network kill-switch, compartmentalised identities, and reproducible security tooling.
SSRF to Internal AWS Metadata: A Bug Bounty Case Study
Step-by-step breakdown of chaining an open redirect with a blind SSRF to reach the EC2 metadata endpoint and escalate to credential theft.
Frequently Asked Questions
Who is Priyansh Khandal?
Priyansh Khandal is a cybersecurity researcher, SOC analyst, and penetration tester specializing in bug bounty reconnaissance, AI red-teaming, and EVM blockchain smart contract auditing.
What security services and research areas does Priyansh specialize in?
Specializations include SOC Alert Triage automation, Vulnerability Assessment and Bug Bounties, AI Red-Teaming (using tools like Garak and PyRIT), Smart Contract Auditing (EVM reentrancy, access control, logic bugs), and Declarative Security Environments with NixOS.
How can I contact Priyansh Khandal for security inquiries or audits?
You can reach Priyansh directly via email at [email protected] or connect on LinkedIn and GitHub (@rootwithkhandal).
Where can I find Priyansh's security research writeups and code repositories?
Detailed technical writeups are published on the Researches page (/researches), and open-source tools and configurations are hosted on the Projects page (/projects) and GitHub.
Get in Touch
Direct inquiries for SOC engineering, penetration testing engagements, AI red-teaming, or EVM smart contract auditing. Responses usually within 24 hours.
PGP key and verification artifacts available upon request. All communications handled with operational confidentiality.