Saurabh Harit
Practice Lead, Mandiant Consulting META at Google
Dubai, Dubai, United Arab Emirates
Summary
👤
Senior🎓
Top SchoolSaurabh Harit is a seasoned information security leader with over 15 years of hands-on experience in red teaming, network and application penetration testing, and adversary simulation, currently leading Mandiant Consulting for META. He has built and run proactive security teams across global engagements in banking, aerospace, finance and industrial control systems, and has a track record of translating deep technical research into repeatable consulting practices and vCISO services. A frequent conference presenter (BlackHat, Derbycon, BSides) and author of the open-source tool Yasuo, he also contributed a practical fix to the widely used impacket project to handle passwords with “@”, reflecting attention to real-world tooling issues. Certified OSCP, CEH and CREST practitioner, Saurabh combines binary reverse engineering and wireless testing expertise with strong client-facing and team-management skills. Colleagues describe him as a communicator who bridges executive risk discussions and detailed technical exploitation work.
11 years of coding experience
11 years of employment as a software developer
Diploma System programming & VLSI Design, Diploma System programming & VLSI Design at CDAC, Noida (UP)Rashtrasant Tukadoji Maharaj Nagpur UniversityRyan International School
Stackoverflow
11reputation
2kreached
1answer
0questions
Github Skills (13)
python10
impacket10
security10
wmi9
smb9
dce9
rpc9
msrpc9
drpc9
kerberos8
emulation6
android6
networking6
Programming languages (4)
Github contributions (5)
fortra/impacket
Nov 2015 - Nov 2015
Impacket is a collection of Python classes for working with network protocols.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:6 commits, 1 PR, 1 comment in 1 day
Contributions summary:Saurabh's contributions focused on fixing a critical authentication issue within the `impacket` library. The commits primarily address a bug where passwords containing the "@" symbol break authentication, a common delimiter in impacket scripts. The changes involve modifying several example scripts, specifically `wmiexec.py`, `secretsdump.py`, `psexec.py` and `mssqlclient.py`, to correctly handle passwords with the "@" character. This fix ensures proper functionality of the impacket scripts for penetration testing and security audits.
pythonwmipass-the-hashnetconfclasses-python
0xsauby/yasuo
Sep 2014 - Dec 2017
A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Contributions:67 commits, 11 PRs, 55 pushes in 3 years 3 months
bugbountymethodologyvulnerability-scanners3rd-partynessus
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.