Medium

Parth Narula

him

Pinned

Parth Narula

·

Jan 5

Account Takeover via IDOR in GraphQL Invitation Flow

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

Account Takeover via IDOR in GraphQL Invitation Flow

Parth Narula

·

Sep 24

I Verified One Email and Claimed Another’s Invitation

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

I Verified One Email and Claimed Another’s Invitation

Parth Narula

·

Sep 13

OTP IDOR: When One Code Verifies the Wrong Phone Number

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

OTP IDOR: When One Code Verifies the Wrong Phone Number

Parth Narula

·

Aug 19

I Bypassed Email Verification in One Request

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

I Bypassed Email Verification in One Request

Parth Narula

·

Jul 25

I Modified Collections I Did Not Own: IDOR

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

I Modified Collections I Did Not Own: IDOR

Parth Narula

·

Jul 9

Recon to Shell Access: Nokia Hall of Fame

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

Recon to Shell Access: Nokia Hall of Fame

Parth Narula

·

Jun 25

One Email, Multiple Accounts: Account Duplication

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

One Email, Multiple Accounts: Account Duplication

Parth Narula

·

Jun 14

From Profile Update to Account Takeover: A Mass Assignment Story

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

Parth Narula

·

Jun 3

From Exposed API Keys to Account Takeovers

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

From Exposed API Keys to Account Takeovers

Parth Narula

·

May 17

How a Simple Self XSS Became Stored XSS

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

How a Simple Self XSS Became Stored XSS

Parth Narula

Parth Narulahim

Founder @ScriptJacker LLP | VAPT | Pentester | Security Researcher | Red Teamer | Bug Hunter | eJPT | eWPTX | 2xCVE | CEHv13 | Secured 425+ companies | 250+ HoF

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech