My internship at IT-Development

Overview

I completed a 6-month internship at IT-Development as a pentester. My role was to find security vulnerabilities in the company's web applications so that developers could fix them.

To do this, I carried out security audits and penetration tests, and helped put security solutions in place.

The company

IT-Development (ITD) is a software company that markets innovative solutions for mobile network operators and towercos.

The team is made up mostly of developers, DevOps engineers and business analysts, and numbers around 50 people.

What I did

Penetration testing

ITD brings in an external security auditor to run penetration tests on its applications. My role is to prepare these audits, guide the auditor through the product, and make sure the fixes are implemented. I also run regular penetration tests to find deeper security flaws, spending more time than the external auditor.

Writing tickets

I also helped write security tickets for developers. These tickets describe the flaws I found and the steps to follow to fix them.

Examples of flaws found

These vulnerabilities were found during my penetration tests and were fixed by the developers:

• SQL injection
• RCE (remote code execution)
• Privilege escalation
• XSS
• CSRF