Certified Penetration Testing Professional (CPENT)

• Engagement Planning & Ethics

The approach to scoping penetration testing engagements, defining objectives, establishing clear communication with stakeholders, and adhering to legal and ethical boundaries.

• Information Gathering & Reconnaissance

Open-Source Intelligence (OSINT) techniques for gathering actionable intelligence and identifying, mapping, and analyzing an organization's attack surface.

• Social Engineering

The techniques and preventive measures related to exploiting human vulnerabilities through social engineering.

• Web & API Security Testing

Web app and API security testing: SQL injection, XSS, authentication flaws, JSON Web Tokens (JWT), testing endpoints and exploiting misconfigurations.

• Network & Perimeter Security

Bypassing firewalls and IDS, navigating networks, accessing systems, pivoting between assets, navigating internal networks, and pivoting to critical assets during penetration testing.

• Windows & Active Directory Exploitation

Exploiting Windows vulnerabilities for privilege escalation and testing and exploiting active directory weaknesses.

• Linux Exploitation & Privilege Escalation

Techniques for exploiting Linux systems and escalating privileges while understanding common vulnerabilities and configurations.

• Binary Exploitation & Reverse Engineering

Techniques for reverse engineering, fuzzing, and binary exploitation to identify and exploit weaknesses in software and applications.

• loT Security Testing

Techniques to find and exploit vulnerabilities in loT devices and ecosystems.

• Reporting & Post-Testing Actions

Creating professional penetration testing reports, communicating findings effectively, and outlining actionable post-testing recommendations.

• Cybersecurity professional
• Teams and Organizations
• Government and military
• Educators

• Module 01: Introduction to Penetration Testing and Methodologies
• Module 02: Penetration Testing Scoping and Engagement
• Module 03: Open-Source Intelligence (OSINT)
• Module 04: Social Engineering Penetration Testing
• Module 05: Web Application Penetration Testing
• Module 06: API and Java Web Token Penetration Testing
• Module 07: Perimeter Defense Evasion Techniques
• Module 08: Windows Exploitation and Privilege Escalation
• Module 09: Active Directory Penetration Testing
• Module 10: Linux Exploitation and Privilege Escalation
• Module 11: Reverse Engineering, Fuzzing, and Binary Exploitation
• Module 12: Lateral Movement and Pivoting
• Module 13: loT Penetration Testing
• Module 14: Report Writing and Post-Testing Actions

• Penetration Testing Essential Concepts
• Mastering the Metasploit Framework
• PowerShell Scripting
• Bash Environment and Scripting
• Python Environment and Scripting
• Perl Environment and Scripting
• Ruby Environment and Scripting
• Wireless Penetration Testing
• OT and SCADA Penetration Testing
• Cloud Penetration Testing
• Database Penetration Testing
• Mobile Device Penetration Testing

Exam Name: Certified Penetration Testing Professional (CPENT)
The CPENT exam is a 100% practical exam and includes a penetration testing report submission.Exam features:

• Choose your challenge: Either two sessions of 12 hours each or a single 24-hour exam
• Pen Test Report Submission (within seven days of final session)
• Proctored exam
• Score at least 70% to earn the CPENT certification
• Score more than 90% and earn the highly regarded Licensed Penetration Tester (LPT) certification