“Pentesting is like the movies”

The honest answer

Total myth. Pentesting is patience, time, and hitting dead ends over and over.

On modern systems it’s rare that you’ll pop a shell or land Domain Admin, and it’s almost never a quick win. The dramatic movie version just isn’t the job.