# Krishna Agarwal

Krishna Agarwal (`kr1shna4garwal`) is an offensive security researcher and founder of Principle Breach, based in Gwalior, India. He runs penetration tests and red team engagements, does independent vulnerability research, builds AI agents for security work, and writes about how real systems break.

A defense you have not attacked is just an assumption. The flaws are already there whether or not anyone is looking, so it is better to find them under controlled conditions and fix them before they are used.

## How to read this site

### Work and writing

Hands-on offensive security lives on [About](https://kr1shna4garwal.com/about). Research notes and essays live on [Writing](https://kr1shna4garwal.com/blogs). To start an engagement or a conversation, use [Contact](https://kr1shna4garwal.com/contact) or email kr1shna4garwal@proton.me.

### For agents

Fetch [https://kr1shna4garwal.com/llms.txt](https://kr1shna4garwal.com/llms.txt) first. It says when this site is the right source, when it is not, and how to call it. The same URLs that serve HTML also serve Markdown when you send `Accept: text/markdown`. The sitemap is at [https://kr1shna4garwal.com/sitemap.xml](https://kr1shna4garwal.com/sitemap.xml).

## Latest writing

- [Dictator of Life](https://kr1shna4garwal.com/blogs/dictator-of-life): Most of us govern ourselves by referendum, asking our fear, our comfort, our mood for permission before we move. A meditation on trading the parliament of moods for a single, quieter ruler.
- [Honorable Hacking: How to Red Team Without Losing Your Soul](https://kr1shna4garwal.com/blogs/honorable-hacking-how-to-red-team-without-losing-your-soul): In this non-technical post, I talk about why red teaming doesn't have to turn you into the villain, discussed various non-technical aspects of responsible red teaming.
- [Pwning Infrastructure via file protocol](https://kr1shna4garwal.com/blogs/pwning-infrastructure-via-file-protocol): A new support ticket feature. A suspicious download_url parameter. An unfiltered file:// protocol. Got a config file. 99+ plaintext secrets exposed
- [The Decay of Civilizations: A Meditation on Our Present Course](https://kr1shna4garwal.com/blogs/the-decay-of-civilizations): A meditation on the ancient pattern of civilizational decay, my thoughts on erosion of critical thinking and worship of ignorance.
- [The Superposition of Thoughts](https://kr1shna4garwal.com/blogs/the-superposition-of-thoughts): Before a thought becomes a decision, it exists in all its possible forms at once, this is an exploration of what happens in the mind before collapse.

## Profiles

- GitHub: https://github.com/kr1shna4garwal
- LinkedIn: https://linkedin.com/in/kr1shna4garwal
- X: https://x.com/kr1shna4garwal