Become a Certified Penetration Testing Professional (C|PENT)


Become a Certified Penetration Testing Professional (C|PENT)

Introduction to Certified Penetration Testing (CPENT)

The Certified Penetration Testing Professional or CPENT Certification, for short, re-writes the standards of penetration testing skill development.

EC-Council’s Certified Penetration Testing Professional (C|PENT) program teaches you how to perform an effective penetration testing in an enterprise network environment that must be attacked, exploited, evaded, and defended. If you have only been working in flat networks, C|PENT’s live practice range will teach you to take your skills to the next level by teaching you how to pen test IoT systems, OT systems, how to write your own exploits, build your own tools, conduct advanced binaries exploitation, double pivot to access hidden networks, and also customize scripts/exploits to get into the innermost segments of the network.

The heart of the CPENT course is all about helping you master your pen testing skills by putting them to use on our live cyber ranges. The certified penetration testing ranges were designed to be dynamic in order to give you a real-world training program, so just as targets and technology continue to change in live networks, both the (C|PENT) practice and exam ranges will mimic this reality as our team of engineers continue to add targets and defenses throughout the CPENT course’s lifetime.

Program Information

Is This Course For Me?

We have helped over 250,000 people answer this question over the past 20 years and we are excited to help you with this big decision! Choosing the right credential can seem like a difficult task, here are some things you should consider:

C|PENT... No other Pen Test Course like it!

Advanced Windows Attacks

This zone contains a complete forest that you first have to gain access to and then use PowerShell and any other means to execute Silver and Gold Ticket and Kerberoasting. The machines will be configured with defenses in place meaning you to have to use PowerShell bypass techniques and other advanced methods to score points within the zone.


Attacking IOT Systems

C|PENT is the first certification that requires you to locate IOT devices and then gain access to the network. Once on the network, you must identify the firmware of the IOT device, extract it, and then reverse engineer it.


Writing Exploits: Advanced Binary Exploitation

Finding flawed code is a skill competent pen testers need. In this zone you will be required to find the flawed binaries then reverse engineer them to write exploits to take control of the program execution. The task is complicated by the requirement of penetrating from the perimeter to gain access then discover the binaries. Once that is done you have to reverse engineer the code. Unlike other certifications, C|PENT includes 32 and 64 bit code challenges and some of the code will be compiled with basic protections of non-executable stacks. You must be able to write a driver program to exploit these binaries, then discover a method to escalate privileges. This will require advanced skills in binary exploitation to include the latest debugging concepts and egg hunting techniques. You are required to craft input code to first take control of program execution and second, map an area in memory to get your shell code to work and bypass system protections.


Bypassing a Filtered Network

The C|PENT certification provides web zone challenges that exist within a segmentation architecture, so you have to identify the filtering of the architecture then leverage this knowledge to gain access to web applications. The next challenge is to compromise and then extract the required data from the web apps to achieve points.


Pentesting Operational Technology (OT)

The C|PENT range contains a zone that is dedicated to ICS SCADA networks that the candidate will have to penetrate from the IT network side and gain access to the OT network. Once there, you will have to identify the Programmable Logic Controller (PLC) and then modify the data to impact the OT network. You must be able to intercept the Mod Bus Communication protocol and communication between the PLC and other nodes.


Access Hidden Networks with Pivoting

Based on our beta testing, pen testers struggle to identify the rules that are in place when they encounter a layered network. Therefore, in this zone you will have to identify the filtering rules then penetrate the direct network. From there, candidates have to attempt pivots into hidden networks using single pivoting methods, but through a filter. Most certifications do not have a true pivot across disparate networks and few (if any) have the requirement into and out of a filtering device.


Double Pivoting

Once you have braved and mastered the challenges of the pivot, the next challenge is the double pivot. This is not something that you can use a tool for; in most cases the pivot has to be set up manually. C|PENT is the first certification in the world that requires you to access hidden networks using double pivoting.


Privilege Escalation

In this challenge, the latest methods of privilege escalation reverse engineering code to take control of execution then break out of the limited shell are required to gain root/admin.


Evading Defense Mechanisms

The range requires your exploits be tested by different defenses you are likely to see in the wild. Candidates are required to get their exploits past the defenses by weaponizing them.


Attack Automation with Scripts

Prepare for advanced penetration testing techniques and scripting with seven self-study appendices: Penetration testing with Ruby, Python, PowerShell, Perl, BASH, Fuzzing, and Metasploit.


Weaponize Your Exploits

Customize your own tools and build your armory with your coding expertise to hack the challenges presented to you as you would in real life.


Write Professional Reports

Experience how a pen tester can mitigate risks and validate the report presented to the client to really make an impact. Great pen testing doesn’t mean much to clients without a clearly written report!

C|PENT Cyber Range - Enter if you dare!

The C|PENT range consists of entire network segments that replicate an enterprise network — this is not a computer game simulation; this is an accurate representation of an enterprise network that will present the latest challenges to the pen tester. The benefit of hands on learning in a live cyber range is that candidates will encounter multiple layers of network segmentation, and the C|PENT course will teach candidates how to navigate these layers, so that once access is gained in one segment, a candidate will know the latest pivoting techniques required to reach the next. However, that won’t be enough on its own as the targets and segments are progressive in nature, so once you get into one machine and or segment, the next one will challenge you even more!

Note: Candidates wishing to re-attempt the C|PENT exam can purchase an exam voucher and/or a 30-days access to the C|PENT Practice Range which is sold separately.

C|PENT Benefits

  • 100% mapped with the NICE framework.
  • 100% methodology-based penetration testing program.
  • Blends both manual and automated penetration testing approaches.
  • Designed with the most common penetration testing practices offered by the best service providers.
  • Maps to all major Job Portals. Role Title: Penetration Tester and Security Analyst.
  • Provides strong reporting writing guidance.
  • Gives a real-world experience through an Advanced Penetration Testing Range.
  • Provides candidates with standard Pen test for use in the field.

Is C|EH a Pen Test Program?

The C|PENT program is the next step after the Certified Ethical Hacker (C|EH) certification on the journey to the Licensed Penetration Tester (LPT) Master. There is a lot of chatter out in “the ether” that refers to C|EH as a Pen Test program. That information is not correct. The C|EH course was designed to teach the tools and methods deployed by cyber criminals.

The C|PENT and its now-retired predecessor courses, the EC-Council Certified Security Analyst (ECSA) and the Advanced Penetration Tester (APT), are pen test courses that were designed to take the concepts taught in CEH and apply them to time-proven pen test methodologies.

2 Certs, One Exam! CPENT & LPT Master

You have the potential to earn two certifications with one exam. If you score above a 90% on the CPENT live range exam, not only will you earn the CPENT certification, but you will also earn the Licensed Penetration Tester (LPT) Master Credential!

To be a LPT (Master) means that you can find chinks in the armor of defense-in-depth network security models with the help of network pivoting, making exploit codes work in your favor, or by writing Bash, Python, Perl, and Ruby scripts. The live range CPENT exam demands that you think on your feet, be creative in your approach, and not rely on the conventional techniques.

Outsmarting and out maneuvering the adversary is what sets you apart from the crowd. The CPENT’s hands-on exam offers a challenge like no other by simulating a complex network in real time. This experience will test your perseverance and focus by forcing you to outdo yourself with each new challenge.

LPT (Master) certified professional can:

  • Demonstrate a repeatable and measurable approach to penetration testing
  • Perform advanced techniques and attacks to identify SQL injection, Cross site scripting (XSS), LFI, RFI vulnerabilities in web applications
  • Submit a professional and industry accepted report that achieves management and technical buy-in
  • Get access to proprietary EC-Council penetration testing methodologies
  • Write exploit codes to gain access to a vulnerable system or application
  • Exploit vulnerabilities in Operating systems such as Windows, Linux
  • Perform privilege escalation to gain root access to a system
  • Demonstrate ‘Out-of-the-box’ and ‘lateral’ thinking

Ensure the integrity and value of the penetration testing certification, in a fully online, remotely proctored certification exam

Is the Certified Penetration Testing Professional (CPENT) Course online?

The C|PENT course training is available in two different formats: on-demand (self-paced video course) and instructor-led (either live in-person or online). The on-demand format allows candidates to learn at their own pace, while the instructor-led format offers live guidance and interaction with the instructor. Candidates can choose the format that best fits their schedules and learning preferences.

What is the CPENT Exam format and duration?

Candidates for the C|PENT certification are evaluated via a rigorous 24-hour performance-based and hands-on exam proctored online and remotely. Candidates have the option of taking the exam in two 12-hour sessions or a single 24-hour period. C|PENT certification requires candidates to demonstrate dedication and determination in order to pass increasingly difficult examinations that measure their endurance and concentration.

What is the CPENT Certification validity?

The certification demonstrates your knowledge and skills in penetration testing and is recognized by organizations worldwide. The C|PENT certification is valid for three years from the date of obtaining the certification. After three years, individuals will need to renew their certification to maintain their C|PENT status.

How much does CPENT cost?

The C|PENT certification cost may vary depending on the type of training you choose (self-paced online, live online, or in-person). Learn more about the C|PENT certification price and exam fees here. Alternatively, you can fill out this form and get in touch with our career advisors, who will be able to guide you with information on C|PENT pricing and funding options that suit your budget and schedule.

What is the CPENT passing criteria?

To pass the C|PENT exam, candidates must score at least 70%. But here's a bonus: if you earn over 90%, you'll receive the prestigious L|PT (Master) credential!

Can I earn two certifications upon achieving a score of 90% or higher in the CPENT exam?

Yes, upon successfully completing the C|PENT exam, you will earn two certifications - C|PENT and L|PT (Master), which will be added to your Aspen account.

Why People Love Certified Penetration Testing Certification

An Exciting Career Awaits A C|PENT

Time of Completion

40-hour course + 24-hour exam

Jobs Available

59,000+ on LinkedIn alone for Pen Testers

Average Salary

$116,478 in the U.S.

Spend just 40 hours and align your career to the growing demand for Certified Penetration Testers. With CPENT, you will cover advanced penetration testing tools, techniques, and methodologies most needed right now. 

Accreditations, Recognitions & Endorsements