Malware analyst and reverse engineer building defensive systems, Android and Windows tooling, AI products, and public cyber-safety infrastructure.
01 // Who I Am
Context // mission // evidence
I am Yogesh Khola, also known professionally as Laksh Yadav and CodeWithLaksh. I focus on malware analysis, reverse engineering, Android internals, Windows binary analysis, and defensive software engineering.
I am the founder of Cyber Kavach, a cybersecurity and digital-safety initiative built to help people recognize threats, avoid scams, and use technology more safely.
Alongside software and AI engineering, I work on technical investigations and digital defense with the Panipat Cyber Police using responsible, evidence-led analysis, threat mitigation, and forensic workflows.
“The strongest software decisions happen at the boundary between engineering, defensive security, and the reality of the people using the system.”
02 // Selected Work
An organization, a platform, shipped apps, and ongoing research — each is its own thing, with its own users, output, and status.
SECURITY ORGANIZATION
Cybersecurity · Digital Safety · Public Education
A public cybersecurity and digital-safety initiative helping people recognise threats, avoid scams, and stay safe online.
What it is
Cyber Kavach is an organization, not a software product — its output is public safety: threat awareness, scam advisories, and defensive guidance for real people.
DEVELOPER PLATFORM
EdTech · Code Evaluation · Classroom Tooling
A competitive coding platform and classroom engine for universities — challenges, judging, and cohort analytics in one system.
What it is
CodeArena is a software product with users and uptime — a coding platform where students solve challenges and instructors run assessments. It is engineering, not advocacy.
OPEN-SOURCE ANDROID APP
Android · Kotlin · Bluetooth Audio
An open-source Android companion for advanced Apple audio accessory controls and intelligent automation.
What it is
Auralynx is a consumer Android application — a standalone product for people who own cross-platform audio gear.
PRIVACY CLI + AGENT SKILL
Privacy · Python · Metadata Forensics
Offline metadata scrubber that strips GPS, device, author, and AI-prompt traces — then verifies the result before saving.
What it is
VeriScrub is a command-line tool and agent skill — nothing leaves the machine. It runs where the file already is.
ANDROID + DESKTOP TOOLS
Android · Automation · Utilities
Native Android applications and desktop automation tools built for practical, everyday workflows.
What it is
The JARVIS suite combines packaged releases for Music and GeoSpoof with the source-only WhatsApp Sender project — no accounts or telemetry are required.
MULTI-APP BUSINESS SUITE
Flutter · Food Delivery · Business Ops
A three-sided food-delivery ecosystem whose source remains available while its packaged releases undergo security remediation.
What it is
Biteo is a multi-sided marketplace product with three Flutter clients. Direct downloads are withheld until backend authorization and data-access controls are remediated and verified.
ACTIVE RESEARCH
Reverse Engineering · Binary Analysis · Forensics
Static and behavioural analysis of Android and Windows malware, paired with evidence-led investigation workflows.
What it is
This is applied research — analysis work that produces findings, not a product with users.
03 // Apps & Releases
Real assets from GitHub Releases. Every local download has an exact byte count and SHA-256 checksum.
Android · Android APK · 8.07 MB
Native Android music streaming and download client for JioSaavn content — part of the JARVIS ecosystem.
Android · Android APK · 17.34 MB
Developer tool for simulating GPS locations via Android's official mock-location APIs — OSM map picker, foreground service, and boot persistence.
Python 3.10+ · Python wheel · 57.8 KB
Offline metadata scrubber — strips GPS, device, author, and AI-prompt metadata from images, video, audio, PDF, DOCX and Markdown, then verifies the result before saving.
Agent · Python · ZIP package · 8.1 KB
Portable agent-skill bundle of VeriScrub for AI assistants — the same verified offline scrubbing workflow packaged as a skill.
Source available
Android · Kotlin
Open-source Android companion for advanced Apple audio accessory controls, automation, and audio tooling.
View source repository ↗Electron · Node.js
Desktop control center for multi-account WhatsApp campaign automation, with templating and Telegram logging.
View source repository ↗Python
Personal fork of JioSaavnAPI with additional fixes and modifications — the API layer behind JARVIS Music.
View source repository ↗Flutter · Android
Customer-facing Biteo source code. The current release is not offered as a download here while backend authentication, caller authorization, and Cloud Function access controls undergo security remediation.
View source repository ↗Flutter · Android
Vendor operations source code. The current release is not offered as a download here while ownership enforcement and restrictive Firestore and Storage rules undergo security remediation.
View source repository ↗Flutter · Android
Business and cross-outlet management source code. The current release is not offered as a download here while its client-side admin authentication undergoes security review and remediation.
View source repository ↗Tap Download on the package you want. The file saves to your device.
For APKs, let your browser or Files app "Install unknown apps" when prompted.
Compare the SHA-256 checksum shown here against the file you received.
Install the APK, or unpack the ZIP / install the wheel locally.
File sizes are read from the actual files and checksums are SHA-256 of the exact published assets. These are independent packages you install at your own discretion — only install software from sources you trust.
04 // AREAS OF EXPERTISE
AI informs product capability, security informs system resilience, and full-stack architecture glues them together into coherent production software.
Designing intelligent application features by integrating LLMs into actual production interfaces and developer workflows.
// OPERATIONAL CAPABILITIES
Constructing full vertical slices of web software: from accessible, responsive interfaces down to reliable APIs and persistence.
// OPERATIONAL CAPABILITIES
Analyzing malicious software and application internals across Android and Windows with responsible, evidence-led reverse-engineering workflows.
// OPERATIONAL CAPABILITIES
05 // TECHNICAL TOOLKIT
An accurate accounting of technologies utilized in actual production software. No inflated meters or fabricated claims. Every node represents authentic shipped code or active engineering workloads.
Every tool in this tree reflects actual shipped software or active engineering pipelines. No inflated bars, fabricated masteries, or buzzword padding.
06 // ENGINEERING PRINCIPLES
Non-negotiable architectural tenets applied to daily development, systems design, and security research.
Design around what real people need to accomplish, never around technology hype. The stack must always serve the solution.
Readable, maintainable code consistently outperforms convoluted cleverness. Write software you and your team can understand in six months.
Treat security, data validation, and user privacy as foundational design inputs, never as afterthought patches before launch.
Six uncompromised axioms guiding high-velocity development, zero-trust security, and pragmatic AI execution.
Use artificial intelligence to accelerate execution and power practical capabilities, while remaining vigilant regarding its boundaries and hallucinations.
Hard engineering challenges are the core objective. True competency is forged by building things slightly beyond current comfort zones.
Conclusions must strictly follow verifiable evidence. Especially in security and investigations, fair, methodical analysis is paramount.
07 // Connect
I am open to malware analysis, reverse engineering, Android and Windows internals, AI engineering, Cyber Kavach, and defensive-security collaborations.