Ayush Kumar
About
Ayush Kumar is a B.Tech Computer Science and Engineering student at Delhi Technological University focused on Android security, vulnerability research and secure software systems. He built the lab research platform now developed as NPerseus and maintains an open-source Android application for privacy-conscious VPN-detection data collection. His public software work also includes PDF translation, code-to-wiki documentation, developer tooling and web-application prototypes. He is a co-inventor on three granted Indian patents spanning context-aware access control, secure EV charging and adaptive game simulation.
Research focus · Android Security, Vulnerability Research and Secure Systems
Achievements
- Co-inventor on Indian Patents IN 582601, IN 588448 and IN 599946. Publicly reports a rewarded finding through Google’s Android Vulnerability Reward Program. Bugcrowd’s public Alpfha profile records a valid Android finding and a Motorola Mobility Hardware Engagement Hall-of-Fame entry.
Security writeups · 5
- GameManagerService: two unguarded Binder methods leak cross-profile game activity to any app
- MediaSessionService: any app can name a class and have system_server construct it
- Unbounded notification bitmap offload to /data/system — storage-exhaustion DoS on Android 14–16
- Background activity launch from a zero-permission app: six system components that fire an attacker's PendingIntent with their own BAL exemption
- TrustManagerService.isActiveUnlockRunning: the one Binder method in ITrustManager with no caller check
Key Projects
NPerseus Research Platform
built and maintains a full-stack research-group platform for member profiles, publications, projects and collaboration workflows.
Project record →VPN-Detect Collector (vpn-collector-android)
Built encrypted-traffic and VPN research software for collection coordination, traffic preparation, feature extraction, model training, evaluation and experiment provenance, using third-party tools and libraries. The work includes traffic contributed by Ayush Kumar and volunteers during everyday device use, kept distinct from imported benchmarks and synthetic examples. The study has documented consent and institutional ethics approval. Its public Android companion uses the PCAPdroid capture engine. A truncated public data edition is prepared locally and awaits publication; raw research access for trusted researchers and organisations is considered through enquiry and review.
Project record →View repositoryTranslation Service (Transaltion-Service)
Python and FastAPI project for PDF extraction, Gemini-assisted translation and layout reconstruction, with command-line and web interfaces.
Project record →View repositoryDockingcode (DocingCodeV1)
React and Node.js documentation prototype that analyses repository source, generates AI-assisted descriptions and publishes them to a GitHub wiki with progress updates.
Project record →View repository
More projects (20)
CryptoScore (BlockCreditScore)
TypeScript, React and Express prototype for exploring Ethereum wallet activity through transaction analysis, scoring rules and dashboards; not a validated credit-rating service.
Project record →View repositoryVyvsai (Team-Vyvsai)
contributed to a React-based tender discovery and bidding platform with account, tender-browsing, subscription and document-upload interfaces.
Project record →View repositoryGitHub Reviewer Tool (GithubScraperTool)
Java and Spring Boot developer tool for retrieving public repositories and inspecting source structure with configurable heuristic complexity scores.
Project record →View repositoryTheSelectors
React and Material UI interview-management prototype with interview creation, expert listings, search and a skill-discussion interface.
Project record →View repositoryRapidNew
Java Mindustry plugin for automatic item and liquid replenishment using cached building requirements; developed from an earlier JavaScript replenishment mod, with RapidNew and Radpid-MindustryPlugin counted as one project family.
Project record →View repositoryDTU Research Portal (historical)
contributed to a React and Express paper-submission and review-workflow application; its repository explicitly marks the project abandoned and no longer maintained.
Project record →View repositoryEmbotic Android app (historical contribution)
contributed Kotlin application and layout changes to a hosting-services app; its repository explicitly marks the project abandoned.
Project record →View repositoryAttendance platform
Built an attendance and organization-management platform with mobile and kiosk clients, an administrative dashboard and backend services.
Project record →ContextGuard
Built ContextGuard, a device-access control project spanning mobile apps, an administrative interface and smart-contract components, following an earlier native Android app-blocking prototype.
Project record →Xenoforge / Forge-Core
Primary developer of Xenoforge / Forge-Core, a game and modular engine in development, with contributions from Ayush Negi and use of third-party tools and libraries.
Project record →Esperal
Developing Esperal, an offline single-player game, using third-party tools and libraries. The game is in development.
Project record →Towerdefense
Primary developer of Towerdefense, a Mindustry server plugin with configurable waves, shops, an in-game economy and gameplay-tuning systems.
Project record →Kartikeya
Primary developer of Kartikeya, a Mindustry server-management plugin covering Discord integration, administration, voting, map workflows and player history.
Project record →Exchange-platform customization
Implemented forex-pair administration features, including backend APIs, a database model and an admin interface, within a Bicrypto-based exchange platform.
Project record →Flexi-Store learning prototype
Learning/prototype experiment using the Flexi-Store Kotlin e-commerce client, administration and backend components.
Project record →JeevanSetu
Disaster-response software project.
Project record →Model-pruning and adapter-recovery tooling
Built experimental pipelines for model pruning and adapter-based recovery.
Project record →Dataset-distillation tooling
Built experimental dataset-distillation software for data synthesis, evaluation and experiment tracking.
Project record →Grid-based code-golf tooling
Built developer tooling for grid-based code-golf tasks, including a task browser, solution comparison, example-based validation and code-size analysis, using third-party tools and libraries.
Project record →Image-prediction and inpainting experiments
Built experimental image-prediction and inpainting software, including training, checkpointing and evaluation tools, using third-party methods and libraries.
Project record →
Patents
- "Method and System for Context-Aware Dynamic Access Control of Interactive Interfaces in User Devices," Indian Patent Application No. 202511069726; Indian Patent No. 582601, granted March 9, 2026.
- "System and Method for Securely Charging Electric Vehicle," Indian Patent Application No. 202511054094; Indian Patent No. 588448, granted May 6, 2026.
- A. Kumar and R. Kumar, "System and Method to Engage a Player in a Game Simulation," Indian Patent Application No. 202511028807; Indian Patent No. 599946, granted August 20, 2026.