Skip to Content

Certified Penetration Testing Professional (eCPPT)  


Request for price


Length: 5 day (40 hours)

 

The eCPPTv3 learning path (hosted on INE) focuses on the "Consultant" mindset. It goes beyond simple tool usage to teach you how to chain exploits, pivot through internal networks, and compromise complex Active Directory environments. The course is built to bridge the gap between basic hacking (eJPT) and advanced red teaming (eGXPN).

In 2026, the curriculum specifically highlights modern adversary techniques like Living-off-the-Land (LotL) and Azure/Cloud-integrated environment attacks.

eJPT Certified (Highly Recommended): Or an equivalent understanding of basic penetration testing methodologies.

Networking Mastery: Deep knowledge of TCP/IP, routing, and particularly pivoting (using a compromised machine to jump into a private internal network).

Linux & Windows Administration: Comfort with CLI-based navigation and administrative tools for both OS types.

Programming Basics: Ability to read and modify exploit code (Python, Ruby, or C) to suit specific target environments.

2+ Years Experience: While anyone can attempt it, INE recommends 2 years of professional experience in offensive security.

Professional Penetration Testers: Looking to validate their ability to conduct full-scale network assessments.

Security Consultants: Who need to move from "scanning" to "exploiting" and "reporting."

Advanced Blue Teamers: Who want to understand the exact TTPs (Tactics, Techniques, and Procedures) used by adversaries to improve their defense.

OSCP Aspirants: The eCPPT is widely considered the perfect "final boss" before attempting the 24-hour OSCP exam.

Course objectivesCourse outlines

Course objectives

After completing this course, students will be able to:

    • The primary objective of the eCPPT is to transition a student from a "tool-user" to a Security Consultant. It validates your ability to:
      • Conduct a full-chain professional penetration test against a corporate-grade network.
      • Pivot through internal network segments to reach isolated targets.
      • Compromise and escalate privileges within a modern Active Directory environment.
      • Perform manual exploitation of web applications and system services.
      • Document technical findings clearly to answer specific engagement questions.

Course outlines

    • 1. Information Gathering & Reconnaissance
      • Network Discovery: Performing stealthy and aggressive port scanning using Nmap.
      • Service Enumeration: Identifying versions and configurations for services like SMB, HTTP, and RPC.
      • OSINT Integration: Leveraging public data to identify potential attack vectors.
    • 2. Initial Access 
      • Authentication Attacks: Executing password spraying and brute-force attacks against remote services.
      • User Enumeration: Identifying valid domain accounts via protocol-specific leaks (like Kerbrute).
      • Vulnerability Mapping: Matching service versions to known public exploits.
    • 3. Web Application Penetration Testing
      • Manual Exploitation: Finding and exploiting SQLi, XSS, and Local File Inclusion (LFI).
      • CMS Attacks: Targeting common platforms like WordPress or Drupal via vulnerable plugins.
      • Credential Harvesting: Exfiltrating database contents to find cleartext passwords.
    • 4. Exploitation & Post-Exploitation
      • Privilege Escalation: Moving from a standard user to root or SYSTEM using kernel exploits or misconfigurations.
      • Credential Dumping: Extracting hashes from the SAM, LSASS, or memory using Mimikatz/Kiwi.
      • Persistence: Establishing backdoors via scheduled tasks or service modifications.
    • 5. Exploit Development 
      • Memory Corruption: Identifying and exploiting classic Buffer Overflows (Stack-based).
      • Exploit Modification: Adapting public exploit code (Python/C) to work in a specific lab environment.
    • 6. Active Directory Penetration Testing 
      • Domain Enumeration: Using BloodHound and PowerView to map the AD forest.
      • Kerberos Attacks: Executing AS-REP Roasting and Kerberoasting to steal tickets.
      • Lateral Movement: Moving between machines using Pass-the-Hash (PtH) and Pass-the-Ticket (PtT).
      • Domain Admin Takeover: Compromising the Domain Controller to achieve "God Mode" on the network.