CPENT

The Certified Penetration Testing Professional or C|PENT, for short, re-writes the standards of penetration testing skill development.

EC-Council's Certified Penetration Testing Professional (C|PENT) program teaches you how to perform an effective penetration test in an enterprise network environment that must be attached, exploited, evaded, and defended. If you have only been working in flat networks, C|PENT's live practice range will teach you to take your skills to the next level by teaching you how to pen test IoT systems, OT systems, how to write your own exploits, build your own tools, conduct advanced binaries exploitation, double pivot to access hidden networks, and also customize scripts/exploits to get into the innermost segments of the network.

The heart of the (C|PENT) program is all about helping you master your pent testing skills by putting them to use on our live cyber ranges. The (C|PENT) ranges were designed to be dynamic in order to give you a real-world training program, so just as targets and technology continue to change in live networks, both the (C|PENT) practice and exams ranges will mimic this reality as our team of engineers continue to add targets and defences throughout the (C|PENT) course's lifetime.

PREREQUISITES

This certification is built for:

Course Outline:

1. Advanced Windows Attacks
   Access active directories. Power your way through network defences using PowerShell to execute Silver and Gold Ticket and Kerberoasting.
2. Attacking IoT System
   CPENT is the 1st certification in the world to teach IoT attacks.
3. Writing Exploits: Advanced Binary Exploitation
   Go beyond advanced application security testing techniques and experience the thrill of exploiting vulnerabilities in flawed binaries across 32- and 64-bit code challenges.
4. Bypassing a Filtered Network
   Unlike flat networks that most certifications train in, access web applications and extract data through a series of filtered networks with CPENT.
5. Pentesting Operational Technology (OT)
   CPENT is the world's first pen testing certification that allows you to intercept Modbus communication protocol and communicate between PLC and its slave nodes.
6. Access Hidden Networks with Pivoting
   Learn lateral movement and what it means to pivot through filtered networks.
7. Double Pivoting
   If you think pivoting is hard, wait until you try double pivoting!
8. Privilege Escalation
   Gain root access by mastering privilege escalation techniques.
9. Evading Defence Mechanisms
   We don't just teach you to write exploits; we teach you how to bypass protections.
10. Attack Automation with Scripts
    A key skill for most employers, we'll teach you to go beyond tools!
11. Weaponize Your Exploits
    Pentesting tools not enough for you? Here's your chance to learn to build your own armory.
12. Write Professional Reports
    Learn classic pen testing skills from experts.

REQUIRED EXAM AND RECOMMENDED TRAINING COURSES

How Does The Exam Work?

CPENT is a fully online, remotely proctored practical exam that challenges you through a gruelling 24-hour performance-based, hands-on exam. The exam is broken into two practical exams of 12-hours each that will test your perseverance and focus by forcing you to outdo yourself with each new challenge. You have the option to choose either two 12-hour exams or one 24-hour exam.

Candidates who sore more than 70% will earn the CPENT ceritification. Candidates who score more than 90% attain the prestigious LPT (Master) credential!

RECERTIFICATION

EC-Council certifications are valid for three years from the date of certification. During the three year period, the certification must be renewed by participating in EC-Council Continuing Education (ECE) Program. Full details of the EC-Council’s ECE Policy can be found at https://cert.eccouncil.org/ece-policy.html

MORE INFORMATION

Please contact us for more details about this or any of the EC Council certifications and training courses.