Pentester Spotlight: Harshit Sengar

The Cobalt Pentester Spotlight highlights the fascinating journey of our Core members. Through an interview style, we share their experiences, background, and insights into the world of an accomplished ethical hacker.

1. Can you tell us a bit about yourself and how you got started in penetration testing?

My journey into penetration testing began during my childhood, playing computer games like GTA Vice City and San Andreas. I was always fascinated by the cheat codes in these games, which sparked my curiosity about how they worked. This early interest led me to learn about hacking from a friend, where I started exploring various aspects such as Wi-Fi hacking, and call spoofing.

While pursuing my Bachelor's degree in Computer Science, which I completed in 2020, I delved deeper into cybersecurity by participating in numerous Capture the Flag (CTF) competitions and hacking events. Platforms like HackTheBox and CTFtime became my training grounds. I secured first prizes and runner-up positions in several inter-college events. Additionally, I engaged in bug bounty programs with friends, earning multiple Hall of Fame recognitions and bounties for identifying vulnerabilities in different organizations.

Since starting my professional career in 2019, I have gained over 5 years of experience in the cybersecurity domain. My roles included penetration testing, configuration reviews of applications, web services, servers, network devices, and infrastructure security. This blend of academic knowledge and hands-on experience has strengthened my passion for ethical hacking and penetration testing.

2.  What educational background and certifications do you have that prepared you for a career in pentesting?

I completed my Bachelor's degree in Computer Science in 2020, where I was introduced to the world of cybersecurity, studying essential frameworks and standards like OWASP, NIST, and PTES. This academic foundation was enhanced by active participation in CTF competitions and bug bounty programs, where I sharpened my skills in discovering and exploiting vulnerabilities.

I've acquired several key certifications to solidify my penetration testing expertise. These include the OSCP, which provided rigorous, hands-on training; the CPSA and CRT, which validated my advanced skills in security assessments and penetration testing; and the ISO/IEC 27001:2022 ISMS Lead Auditor, which equipped me with crucial knowledge in information security management. Currently, I'm expanding my skill set with cloud security certifications like the CCSP and AWS Certified Security Specialist.

3. Walk us through your career journey as a pentester, are there any significant milestones or projects that stand out?

I embarked on my professional journey in penetration testing back in 2019, diving full-time into cybersecurity even before I graduated with my Bachelor's degree. With over 5.4 years of experience, I've developed a diverse skill set through hands-on involvement in a wide range of cybersecurity roles.

One of the pivotal experiences during my university years was my active participation in bug bounty programs, collaborating with friends to identify vulnerabilities in organizational websites. This effort not only earned me Hall of Fame recognitions and substantial bounties but also solidified my reputation and credibility in the cybersecurity field. Additionally, my participation in numerous CTF competitions led to first-place victories and runner-up finishes, significantly increasing my problem-solving skills.

Professionally, a standout project involved a deep-dive penetration test for a major financial institution. Using tools such as Burp Suite, Metasploit, and Nmap, I uncovered critical vulnerabilities that had a transformative impact on the client's security defenses. Obtaining certifications like OSCP, CPSA, and CRT played a crucial role in advancing my skills and opened the door to more challenging projects.

Currently, my focus has shifted to product security, where I'm delving into cloud security, container security, application security, and infrastructure security within the DevSecOps framework. Leading these projects has been both challenging and rewarding, allowing me to help create secure, robust systems. These key milestones have not only shaped my career but have also laid a strong foundation for continuous growth in the evolving field of penetration testing.

4. What are your go-to tools and techniques when conducting pentests, and why do you find them effective?

In my penetration testing engagements, I rely on a mix of industry-standard tools and custom scripts to ensure thorough assessments. Burp Suite Professional is my primary choice for intercepting and analyzing HTTP/S traffic during web application testing. Burp Suite’'s extensions, such as Autorize, Param Miner, and Turbo Intruder, play a crucial role in my methodology for in-depth analysis and automation. Metasploit serves as a powerful framework for developing and executing exploits, thanks to its rich database of exploits and payloads. For network scanning, Nmap is indispensable, offering detailed insights into network topology, open ports, and running services.

When it comes to mobile application testing, I turn to Frida and Objection, which allow for dynamic analysis and runtime manipulation, facilitating tasks like bypassing security mechanisms and real-time debugging. Nessus remains a go-to tool for vulnerability scanning, providing comprehensive coverage of known issues and assisting in prioritizing threats.

Additionally, I employ custom scripts to automate repetitive tasks, such as reconnaissance, data parsing, and exploit execution, offering flexibility tailored to specific engagements. Amass aids in asset discovery, while SQLmap is my tool of choice for detecting SQL injection vulnerabilities. Fuzzing tools help in uncovering hidden vulnerabilities. Keeping my toolkit up-to-date and leveraging community-driven extensions ensures I'm well-prepared to tackle new and evolving security challenges.

5. For individuals aspiring to enter the field, what advice would you offer in terms of skills development, networking, and breaking into the industry?

Entering the field of penetration testing is a journey that requires dedication and strategy. For aspiring professionals, I recommend starting with solid skills development, networking, and actively seeking opportunities in the industry.

Individuals should begin by establishing a strong foundation in networking, programming, and operating systems. Understanding how networks function, software development processes and system administration basics is crucial. Individuals should engage in hands-on practice through platforms like HackTheBox and CTFtime to experience real-world scenarios. Individuals should pursue certifications such as CEH, eJPT, OSCP, and others to validate their skills, making them more attractive to employers. Individuals should stay informed with the latest security trends through resources like OWASP, NIST, and PTES, and utilize platforms like YouTube, GitHub, and Medium for continuous learning.

Individuals should build their connections by participating in cybersecurity communities and forums. Individuals should join local security groups, attend conferences, and get involved in open-source projects. Individuals should seek mentorship from experienced professionals who can offer guidance, and don't hesitate to share their knowledge through talks, blogs, or contributions to community projects - this helps them establish credibility in the field.

Individuals should gain practical experience by engaging in bug bounty programs. Successfully identifying vulnerabilities can lead to Hall of Fame recognitions and financial rewards, boosting their credibility. Look for internships or junior positions to gain experience in diverse security challenges. Individuals should maintain a portfolio documenting their CTF successes, projects, and bug bounty achievements to showcase their dedication and expertise. Lastly, Individuals should develop strong communication and teamwork skills, as effectively collaborating with clients and colleagues is essential in penetration testing.

6. How do you approach client interactions during penetration tests? Are there specific communication skills that you find crucial for success in this aspect of the job?

Client interactions are a crucial aspect of penetration testing engagements, and I prioritize clear, transparent, and collaborative communication to ensure alignment with the client's goals. My process begins with detailed discussions to understand the client's objectives, expectations, and the scope of the test. This involves defining which assets are in scope, the depth of testing required, and any specific areas of concern. I make sure that all agreements, such as the scope of work, timelines, and deliverables are documented to set a solid foundation.

During the testing phase, I maintain consistent communication, providing regular updates on progress, findings, and potential impacts. My final reports are not just technical summaries but actionable documents tailored to the client's understanding, complete with clear recommendations for remediation.

I also prioritize being available for any client queries, both during and after the engagement. Post-test support is part of my commitment to helping clients interpret findings and implement security improvements effectively. Key skills I bring to these interactions include clarity, active listening, and empathy, ensuring that even complex technical issues are communicated in a way that's easy to grasp. This client-focused approach leads to more effective outcomes and builds strong, lasting relationships.

7. Can you share your experiences and preferences in terms of teamwork, communication, and coordination when engaging in pentests?

Teamwork, communication, and coordination are essential to successful penetration testing, and I thrive in environments that prioritize these elements. Working in a collaborative setting enables the team to draw on each member's strengths, leading to more thorough security assessments. Clear roles and responsibilities are crucial for minimizing overlap and enhancing efficiency, while regular check-ins keep everyone aligned and address challenges promptly.

I advocate for open feedback channels to foster continuous improvement within the team, and when engaging with clients, presenting a unified and consistent message is key. Mentorship plays a big part in my work guiding junior pentesters not only benefits them but strengthens the team's overall capability. I also emphasize using collaborative tools and standardized processes to ensure that our efforts are streamlined and cohesive.

8. Looking ahead, how do you envision the future of penetration testing evolving in 2025, and what do you believe will be the key challenges and opportunities in the coming years?

My insights on the future of penetration testing in 2025 highlight significant shifts in the cybersecurity landscape. The anticipated integration of AI/ML, focus on emerging technologies like IoT, blockchain, and cloud, and the emphasis on ethical and compliance-driven practices reflect a forward-thinking approach that aligns well with current industry developments.