Hi Everyone, Today we also have an Interview with Deepak Bhardwaj a 19 Year Old from India, He tells about his first journey to hacking about how his brother locked their PC and how he successfully cracked the password for about 12 Days reading about how to crack a Windows Password, Since then he went ahead to explore more about hacking.
Hello, Deepak Bhardwaj Introduce YourSelf To Our Readers
Hello Everyone! My Name Is Deepak Bhardwaj, I am 19 year old from India –(Meerut). Am a Ethical Hacker and Cyber Security Researcher Currently working as a Cyber Security Analyst R&D at Ducara (The planet of Ethical hackers). I have been acknowledged and appreciated by many MNCs including Yahoo, Twitter, Facebook, Apple, Godaddy, WordPress, Uber, Zomato, VK and others. And I’m CSCU, CEH, CCNA R&S, CCNA SECURITY, A+, N+ and having other certifications.
How You Started The Journey As A Security Researcher?
After my first hack some people call me Hacker. (Hacker) word belongs to cyber criminal then i decided i am not going to do this again because some one tell me hacking is a crime. After some time i read a cover of book hacking is not a crime hacking is an art of Exploit, Then i continue to gain knowledge about hacking.
How is it an art of exploit, Why is not a crime?, So I understand the difference between Ethical hacker & Hacker When I was coming from school/college simply I sit in the front of computer start searching about hacking and hacker, How hacker can hack anything? What are the ways hacker take for do hacking? How we can prevent our self from hackers, After some time I understand the concept of hacking, Then I start doing my own research. How they are exploit what is the concept of hacking, at that time I started Hacking concept/Hacking concept ideas on Facebook.
When Did You Start Hacking And Tell Us About Your Experience?
When I was in 7 standard My big brother doing Bachelor of computer Application in Graduation . Then we have a computer and I like to play Video games. Days when Vice city game is very popular i spend most of the time playing vice city, Even when my examination is going on.
One day my brother (MOHIT BHARDWAJ) now he is a computer (Network Engineer & Red Hat Certified) got angry because all the time i play Games then he put a password on the computer. After 3 & 4 days when my school friend ask from me why are you sad. I told them the story that my brother put password on our Computer, Friends are friends they always have an idea he told me, try to hack the password And I start learning how to hack. After 12 days, I successfully crack the password, Due to my curiosity then I started making interests in hacking all over the experience is very good. Now I enjoy it 🙂 .
How Did You Start Learning Hacking And Who Taught You?
I start learning first from Google, after I learn lots of from books, Like Hacking High school, Hacking art of Exploit, Black hat hacking, Gray hat hacking so many books I will read and take knowledge, when i successfully hack Windows password for the first time then my brother guide me and fully support me he helps me a lot.
Which Website/System Did You First Break Into?, What’s The Vulnerability?
First I break my brother own computer security that was my starting point and big thing for me. I never forget this in my whole life. After this then i start learning about finding vulnerability on Web Application, I will not mention the name of the website because it’s a school website and i successfully find an SQLi Vulnerability with the help of this, i am able to exploit it and was also big thing for me.
What Advise Will You Give To Beginners Coming Into This Field?
When I started learning hacking as a beginner and I enter in this field my senior ask me what is your Aim?, Then my answer is I want to become a good hacker, so whenever heard the word hacker, a negative perception comes in their mind. Hackers means you are a cyber criminal/thief etc. but now time has changed really this is a very good and unique field, I always give advice to my Juniors make a career in Cyber Security. There are lots of opportunities in this field.
Is Programming Language Really Important, Why? And Which Language To Learn?
As I know hacker, There are two types Structured Hackers And Un-structured hackers, Structured hackers are those which know the programming languages and also are good programmers, Structured hackers are not depending on any other person or tool, they create their own Tools.
Un-Structured Hackers know basic of programming only but they don’t know how to create their own tools and always depend on others. They are using tools which are created by Structured hackers. So overall if you really want to become an independent hacker focus on languages like, some language like HTML, C Programming Language, C++ Programming Language, JAVA Programming Language and the most important PHP and Scripting Language.
What Methodology Do You Use When Participating In A Bug Bounty?
As I know some people are using Vulnerability scanner software like Acunetix, Nessus etc for finding Bug or loop holes. But according to me that is not a good idea. I believed in OWASP and I check the OWASP Top 10 vulnerability one by one when finding vulnerability and also check all the past bug reported, Some times on behalf of that i will be able to find new vulnerability and I always check when I found vulnerability is already given someone or not.
How Do You Keep Your Skills Fresh?
I am always updated on daily basis about what’s going on Cyber field reading news and article. What are the new vulnerability founds, what are the new exploits and who exploits them and important is what method it was used. I am also a bug hunter in Hackerone, so I read all the bug reported which was publicly disclose and learn from it and refresh my skills.
What Do You Think Of The Future Of Bug Bounties Programs?
If we are looking at the past there were only some MNC company which offered bug bounties but now mostly all the Top companies have bug bounties program because all of them wants to be secure and more secure on the web. Its also helpful for student now, and future those research in this field openly. We have an option to develop our skills and make money also. so it’s a work in the future no doubt about it, Last 2 years am also a part of bug Bounties programs.
What Are The References/Best Resources To Get Started?
As I already said Google is the best resource for learning Bug hunting. There are lot of E-books which covers all the concepts of Web Application Penetration testing and Security and OWASP.
How People Can Contact You?
Company website: www.ducarainfo.com