0+
Companies Secured
0+
Hall of Fames
0+
Bugs Resolved
0+
Testing Hours
0x
CTF Champion
═══════════════════ ◆ ═══════════════════
About Parth Narula
// whoami - Security Researcher & Founder @ScriptJacker LLP
I'm Parth Narula, founder of ScriptJacker LLP - a cybersecurity firm specializing in deep, manual penetration testing. I live for those moments where out-of-the-box thinking cracks open a critical vulnerability.
I specialize in Web Application Security, API Pentesting, Red Teaming, and OSINT. From the Australian Government and WHO to Boeing and BBC - I've reported security vulnerabilities to organizations worldwide, earning 250+ Hall of Fames and securing 425+ companies.
Currently pursuing BCA (Cybersecurity) at Lovely Professional University with a 9.75 CGPA, while mentoring the next generation of security researchers and competing in CTF competitions as team leader of ScriptJackers.
// System Info
NameParth Narula
Handle@ScriptJacker
RoleFounder & Lead Pentester
FocusVAPT / Red Team / OSINT
CVEsCVE-2025-56697 + 1
LocationIndia
Status● Available
Skill Matrix
// echo $CAPABILITIES
echo $OFFENSIVE_SECURITY
echo $LANGUAGES
echo $TOOLS_PLATFORMS
Work History
// ls ~/experience/
Founder & Lead Pentester2023 - PRESENT
ScriptJacker LLP
- Founded a cybersecurity firm specializing in deep, manual pentesting across web, API, mobile, and network.
- Delivered security assessments to 150+ clients globally with 2,500+ bugs resolved.
- Built flexible engagement models - project-based, retainer, and subscription.
- Published research and case studies on Medium and blog.
Mentor - Bug Bounty & Web SecurityJUN 2025 - PRESENT
Unihackers
- Mentored students in bug bounty hunting and web application security.
- Simplified complex security concepts into practical learning modules.
Penetration Tester InternAUG - SEPT 2023
Forensic Academy
- Trained on Burp Suite, Wireshark, Cisco Packet Tracer, Linux CLI, and malware analysis.
- Designed enterprise network and performed web pentesting. Completed with Grade A+.
── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ──
Achievement Log
// grep -i "win\|cve" achievements.txt
◆
250+ Hall of Fames
Acknowledged by Australian Govt, WHO, BBC, Boeing, Cambridge, Google, Michelin, and many more.
◈
CVE-2025-56697
Discovered Stored XSS in Kashipara CBT v1.0. Assigned CVE + 1 additional.
⊛
425+ Companies Secured
Reports acknowledged by Pirelli, Sweden Police, Proton Mail, BMC Software, Nykaa, and hundreds more.
★
5x CTF Champion
1st place in Encrypted CTF 2025, RCS 2026, Rootbreach NITJ, Cyberthon, Xploit404.
▣
Certificates of Appreciation
Recognized by Anvas University, Maastricht University, Nykaa, Neoshare.
▤
Published Research
Active writer on Medium and blogs.scriptjacker.in - IDOR, price manipulation, ZoomEye.
Australian GovtBerlin GovtWHOBBCUNESCOGoogleBoeingMichelinCambridgeGEA GroupZeptoProton MailMediaTekCoinSwitchBASFDeutsche BörsePirelliSweden PoliceBMC SoftwareNykaaClearTaxTwingateWhatfixAirmeetVismaSheffield UniAustralian GovtBerlin GovtWHOBBCUNESCOGoogleBoeingMichelinCambridgeGEA GroupZeptoProton MailMediaTekCoinSwitchBASFDeutsche BörsePirelliSweden PoliceBMC SoftwareNykaaClearTaxTwingateWhatfixAirmeetVismaSheffield Uni
Certifications
// cat ~/certifications.txt
eJPTv2eLearnSecurity Junior Penetration Tester
eWPTXv3Web App Penetration Tester eXtreme
CEHv13Certified Ethical Hacker
ACAPApiSec Certified Practitioner
EHEEthical Hacking Essentials
═══════════════════ ◆ ═══════════════════
Projects
// cat ~/projects/*.md
ScriptJacker Recon Tool
ActiveEnd-to-end automated reconnaissance tool. Subdomain enumeration, dir busting, vuln scanning, DNS recon, JS analysis, parameter fuzzing.
Shell/BashPythonRubyReconOSINT
ScriptJacker LLP - Platform
LiveOfficial website & VAPT services platform. Research articles, case studies, security methodologies.
Web SecurityVAPTResearch
Services
// cat ~/services.conf
⊕
Web Application Pentesting
Comprehensive manual testing using OWASP methodology. Authentication, authorization, injection, business logic.
⊘
API Security Testing
REST, GraphQL, SOAP. Auth bypass, IDOR, rate limiting, data exposure, injection vulnerabilities.
⊞
Android App Pentesting
Static & dynamic analysis. Reverse engineering, traffic interception, insecure storage.
⊠
Network Pentesting
Internal & external network testing. Enumeration, scanning, exploitation, lateral movement.
⊡
LLM Security Testing
AI/LLM security assessment. Prompt injection, jailbreaking, data leakage, model manipulation.
⊟
Vulnerability Assessment
Systematic identification and classification of vulnerabilities. Risk-prioritized reporting.
⊙
Security Consulting
Strategic guidance. Architecture reviews, secure SDLC, compliance readiness.
CTF & Bug Bounty
// cat ~/ctf-wins.log
★ 1st Place
Encrypted CTF 2025
★ 1st Place
RCS 2026
★ 1st Place
Rootbreach NITJ 2026
★ 1st Place
Cyberthon
★ 1st Place
Xploit404
◆ Active Hunter
Bug Bounty Programs
── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ── ◇ ──
Client Feedback
// cat ~/testimonials.log
The reports were accurate, and the discussions were constructive and fair. We're completely satisfied with the service and happy to have our security improved.
They came back shortly with detailed reports. Our platform and users are safer, thanks to ScriptJacker!
Communication was quick and thorough, with all information needed to triage and fix bugs. A great experience.
Parth proactively identified security concerns and provided a thorough, well-documented report.
Education
// cat ~/education.txt
Bachelor's in Computer Applications
Lovely Professional University, Phagwara
Intermediate - Commerce
Vishvas Senior Secondary School, Hisar
Matriculation
St. Mary's School, Hisar
═══════════════════ ◆ ═══════════════════
Hobbies & Interests
// Things I do when I'm not breaking systems
▶
CTF Competitions
War games across crypto, web, forensics, and OSINT categories.
◈
Bug Bounty Hunting
Responsibly hunting vulnerabilities in production applications globally.
⊕
Scripting & Automation
Building tools in Bash, Python, Ruby to automate security workflows.
◎
OSINT Research
Open-source intelligence gathering and deep web exploration.
⊞
Reverse Engineering
Taking apart binaries and understanding software at the lowest level.
⊟
Tech Blogging
Writing detailed writeups, case studies, and research articles.
☰
Linux Ricing
Customizing desktop environments, window managers, and terminals.
◆
Mentoring
Helping the next generation find their path in cybersecurity.
Get in Touch
// cat ~/contact.txt
PHONE+91 7497054662
COMPANYscriptjacker.in
GITHUBgithub.com/scriptjacker
LINKEDINLinkedIn Profile
MEDIUMscriptjacker.medium.com