Certified Penetration Tester (CPENT)
SU-417(5 days)
Certified Penetration Tester (CPENT)
30.000 DKK
(excl. VAT)
Course calendar
Description
Certified Penetration Testing Professional (CPENT) is an advanced penetration testing course that teaches you to think and act like a professional ethical hacker. Through realistic, hands-on labs and live cyber ranges, you gain practical experience with the full pentest methodology, from preparation and scoping to exploitation, pivoting, post-exploitation and reporting. The course is designed to build skills that are in demand in today's cybersecurity market. It covers networks, web apps, APIs, Active Directory, IoT and cloud environments.
In the course, you work with:
- Advanced penetration testing techniques and frameworks
- Scoping, engagement and rules for penetration testing
- Open Source Intelligence (OSINT) and social engineering
- External and internal networks, perimeter and web applications
- API security, privilege escalation and defense evasion
- Report writing and post-test analysis
The course gives you realistic practice in identifying security gaps, attacking them effectively and producing professional reports that both technical teams and management can put to use.
Related exam
Prerequisites
To get the most out of the course, we recommend experience or knowledge equivalent to:
Certification bundles
Module overview
- Principles and Objectives of Penetration Testing
- Penetration Testing Methodologies and Frameworks
- Best Practices and Guidelines for Penetration Testing
- Role of Artificial Intelligence in Penetration Testing
- Role of Penetration Testing in Compliance with Laws, Acts, and Standards
- Penetration Testing: Pre-engagement Activities
- Key Elements Required to Respond to Penetration Testing RFPs
- Drafting Effective Rules of Engagement (ROE)
- Legal and Regulatory Considerations Critical to Penetration Testing
- Resources and Tools for Successful Penetration Testing
- Strategies to Effectively Manage Scope Creep
- Collect Open-Source Intelligence (OSINT) on Target’s Domain Name
- Collect OSINT About Target Organization on the Web
- Perform OSINT on Target’s Employees
- OSINT Using Automation Tools
- Map the Attack Surface
- Labs:
- Collect OSINT on Target's Domain Name, Web, and Employees
- Collect OSINT Using Automation Tools
- Identify and Map Attack Surface
- Social Engineering Penetration Testing Concepts
- Off-Site Social Engineering Penetration Testing
- On-Site Social Engineering Penetration Testing
- Document Findings with Countermeasure Recommendations
- Labs:
- Sniff credentials using the Social-Engineer Toolkit (SET)
- Web Application Footprinting and Enumeration Techniques
- Techniques for Web Vulnerability Scanning
- Test for Vulnerabilities in Application Deployment and Configuration
- Techniques to Assess Identity Management, Authentication, and Authorization Mechanisms
- Evaluate Session Management Security and Input Validation Mechanisms
- Detect and Exploit SQL Injection and other Injection Vulnerabilities
- Identify Weak Cryptography and Business Logic Flaws
- Evaluate Applications for Client-Side Vulnerabilities
- Labs:
- Perform Website Footprinting
- Perform Web Vulnerability Scanning Using AI
- Perform Various Attacks on Target Web Application
- Techniques and Tools to Perform API Reconnaissance
- Test APIs for Authentication, Authorization, and Input Validation Vulnerabilities
- Evaluate the Security of JSON Web Tokens (JWT)
- Test APIs for Security Misconfiguration, Rate Limiting, and DoS
- Test APIs for Security of GraphQL Implementations
- Test APIs for Business Logic Flaws and Session Management
- Labs:
- Perform API Reconnaissance Using AI
- Scan and Identify Vulnerabilities in APIs
- Exploit Various Vulnerabilities to Gather Information on the Target Application
- Techniques to Evaluate Firewall Security Implementations
- Techniques to Evaluate IDS Security Implementations
- Techniques to Evaluate the Security of Routers and Switches
- Labs:
- Identify and Bypass a Firewall
- Evade Perimeter Defenses Using Social-Engineer Toolkit (SET)
- Perform WAF Fingerprinting
- Windows Pen Testing Methodology
- Techniques to Perform Reconnaissance on a Windows Target
- Techniques to Perform Vulnerability Assessment and Exploit Verification
- Methods to Gain Initial Access to Windows Systems
- Techniques to Perform Enumeration with User Privilege
- Techniques to Perform Privilege Escalation and Post-Exploitation Activities
- Labs:
- Exploit Windows OS Vulnerability
- Exploit and Escalate Privileges on a Windows Operating System
- Gain Access to a Remote System
- Exploit Buffer Overflow Vulnerability on a Windows Machine
- Architecture and Components of Active Directory
- Active Directory Reconnaissance and Enumeration
- Exploit Identified Active Directory Vulnerabilities
- Role of Artificial Intelligence in AD Penetration Testing Strategies
- Labs:
- Explore the Active Directory Environment
- Perform Active Directory Enumeration
- Perform Horizontal Privilege Escalation and Lateral Movement
- Retrieve Cached Active Directory Credentials
- Linux Exploitation and Penetration Testing Methodologies
- Reconnaissance and Vulnerability Assessment on Linux Targets
- Gain Access to Linux Systems using Various Techniques
- Privilege Escalation on Linux Systems
- Labs:
- Exploit Linux OS Vulnerabilities
- Perform Privilege Escalation on a Linux Machine
- Gain Access to a Remote Linux System
- Introduction to OT and SCADA Systems
- OT and SCADA Penetration Testing Methodology
- Challenges in Testing OT and SCADA Environments
- Labs:
- Intercept Modbus Communication Protocol
- Communicate between PLCs and Slave Nodes
- Introduction to Reverse Engineering and Fuzzing
- Perform Static and Dynamic Analysis of Binaries
- Identify Vulnerabilities through Fuzzing
- Exploit Binary Vulnerabilities
- Labs:
- Perform Binary Analysis
- Perform Fuzzing to Identify Vulnerabilities
- Exploit Buffer Overflow and Other Binary Flaws
- IoT Penetration Testing Methodology
- IoT Device Reconnaissance and Enumeration
- Analyze and Exploit IoT Firmware and Communication Protocols
- Labs:
- Analyze IoT Firmware
- Exploit Vulnerabilities in IoT Devices and Protocols
- Importance of Comprehensive Penetration Testing Reports
- Components of a Professional Penetration Testing Report
- Post-Testing Actions and Remediation Guidance
- Labs:
- Practice Writing Professional Pentesting Reports
Free course advice
We care a lot about helping you find the course path that creates the most value for you and your workplace. Get in touch with our course advisors — they're ready to help you, free of charge and with no obligation.
I can't give anything less than 5 stars across the board. Either you're truly in a class of your own, or I've just been to the wrong course venues before. Fantastic place and atmosphere.... once you've learned to find your way around :-)
Your instructors are exceptional; skilled, competent and good at teaching - so you have everything you need to get off to a good start.
You have fantastic facilities, good food and lovely people throughout the building.
A really good, in-depth course. Your course facilities at Karlebogaard are nothing short of fantastic. A beautiful historic house with lots of fun stories and great course rooms. The course itself was very useful. I learned everything I had hoped to and then some. My instructor was damn good and really funny. He made it a pleasure, and the hours flew by.
Probably the best course I've ever taken and the best instructor I've ever had!! Really good depth and thorough explanations, and on top of that, fantastic food!!!
Delicious food, cozy facilities, good structure and atmosphere. I'll be back when I can.
Absolutely the best course I've ever taken!
The course venue is so inviting and welcoming that it has been a pleasure to be here. Clean, tidy and full of charm. I attended a course where all the individual parts came together into a greater whole that can hardly be described.
I got a lot out of the course. It opened my eyes to possibilities I didn't know existed. I'm sure this won't be the last time we're in touch with SuperUsers.
I never in my wildest dreams imagined that a course venue could be so beautiful. I don't know if it's true, but I have a feeling that the surroundings rub off on the people who work here, so everyone seems incredibly happy.
There's a really great atmosphere. All the way from the woman at the reception desk to the people who work in the kitchen.
The instructor tailored the course to my level to a very large extent and was flexible. I had very high expectations, and they were exceeded.
Great precision, good exercises, good pace, a great atmosphere and maximum learning.
The instructor was very pleasant and the exercises were extremely good. I really learned a lot about the topics the course covered.
On top of that, really nice, calm and green surroundings with good catering - especially good food. I would like to take my courses here again next time.
It was a real pleasure to take a course at SuperUsers. The week we spent on the course was worth the money and means that we can now save many consultant hours. It's always nice to have the knowledge in-house.
There is a relaxed atmosphere in the classroom, lovely surroundings in the building itself, and skilled instructors who do a really good job.
I started using all the knowledge I soaked up on the course almost right away, and now we are well underway with developing our future cloud solution.
There is no doubt about who we will turn to if we need other courses.
This is my first time at SuperUsers. It has been a really good experience. The instructor seems very experienced and competent.
The instructor's strong technical background made the course and the in-depth answers to questions a good experience.
A really nice course venue in pleasant surroundings that make for a good setting for focused learning. The instructor came across as well prepared, with extensive knowledge of the relevant topics.
The instructor also showed a strong ability to answer any questions that came up during the course.
I'll be back the next time I need to take a course. It's a lovely place, the food is fantastic, and the instructor is very knowledgeable and happy to share that knowledge!
The technical depth of the course was really good. The instructor's knowledge went much deeper than the curriculum necessarily requires.
You could throw all kinds of curveballs at the instructor, and he had it all under control - he also made the content exciting.
We have now completed Microsoft 365 courses for a total of 5 people here in our department. Everyone agrees that it was an excellent course with a skilled instructor and communicator who could discuss and explain things at the right level, while also being efficient and bringing humor.
It has been a really good experience.
It's calm and quiet at SuperUsers' country venue. Good atmosphere and catering. Some thought has gone into healthy eating when it comes to food and cake, so it doesn't get completely out of hand.
The instructor is knowledgeable about the topics and readily puts them in a broader perspective by relating them to other relevant areas. It's rewarding that this is possible too, and it gives you ideas for further study.
In addition, the instructor was engaged and entertaining to have presenting the content.
As always, it was a great experience, and you learn a lot in a short time from some very skilled instructors.
I work in Azure almost every day, and both courses have been really good at helping me understand Azure better.
The instructor is very presentation-oriented and gets you involved in the teaching and the material. He is good at varying the teaching so it never gets monotonous.
It is clear that the instructor has hands-on experience and not just the theory, with many good examples that related to real-world challenges we might encounter.
Good facilities and good food, without drowning in unhealthy habits.
Very good course, the instructor was the best. I've been here at SuperUsers before, now I'm here again, and hopefully coming back another time.
The instructor seemed very competent and has extensive knowledge of his field. He was good at explaining things in a clear and humorous way. There were also simple exercises that gave a good understanding.
The instructor was really good at going in depth while still making sure everyone was keeping up. A really nice venue and room, and great food.
There was no doubt that the instructor knew exactly what he was talking about, and even the simplest questions were answered gladly, without anyone being made to feel stupid.
A lovely, cozy place where the receptionist, the kitchen and the instructors make you feel at home. A good setting makes for good learning. Really good food that helps round out the whole experience of taking a course at SuperUsers.
Really happy with the venue and the stay over in the horse stable. I'll see if I can come back here for the next course I take. A really beautiful building, and great to experience a place like this. A fantastic place to hold a course.
