Is getting into pentesting worth in 2025?