eCPPTv2-PTP-Notes

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #cli #claude-code #codex #developer-tools #react #windows

eCPPTv2-PTP-Notes

★ 94 Open GitHub ↗

INE/eLearnSecurity Certified Professional Penetration Tester (eCPPT) / PTP v2 and v3 Notes

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

---
description: >-
  INE/eLearnSecurity Certified Professional Penetration Tester (eCPPT) / PTP v2
  Notes
---

# 📝 eCPPTv2 / PTP - Notes

## 📕 eCPPT - Version 3 (newest - after 2024) <a href="#course-duration-and-topics" id="course-duration-and-topics"></a>

### Course duration & Topics ⏳📚 <a href="#course-duration-and-topics" id="course-duration-and-topics"></a>

\~ 107 hours (_`~97 of videos`_) **10** courses , **172** videos, **124** quizzes, **67** labs

* [**Resource Development & Initial Access**](broken-reference) \~ 22 hours
* [**Web Application Attacks** ](broken-reference)\~ 14 hours
* [**Network Security**](broken-reference) \~ 17 hours
* [**Exploit Development** ](broken-reference)\~ 7 hours
* [**Post Exploitation**](broken-reference) \~ 18 hours
* [**Red Teaming**](broken-reference) \~ 19 hours

🛣️ [**RoadMap / Exam Preparation** ](roadmap-and-my-experience.md)🧑🏻‍🏫

### E-Links 🔗📔 <a href="#useful-links" id="useful-links"></a>

* Where to find the eCPPTv3 certification exam? - [eCPPTv3](https://security.ine.com/certifications/ecppt-certification/)
* Where to find the PTPv3 (Professional Penetration Testing v3) course [INE Learning Paths](https://my.ine.com/CyberSecurity/learning-paths/5e26d0ba-d258-49e0-a421-56cc06626f46/penetration-testing-professional-new-2024)

[eCPPT](https://security.ine.com/certifications/ecppt-certification/) Exam 📄🖊️

* **Time limit**: 24h
* **Expiration date**: yes
*   **Objectives**:

**Information Gathering & Reconnaissance** (10%)

* Perform Host Discovery and Port Scanning on Target Networks
    * Enumerate Information From Services Running on Open Ports

**Initial Access** (15%)

* Perform Username Enumeration to Identify Valid User Accounts on Target Systems
    * Perform Password Spraying Attacks to Identify Valid Credentials for Initial Access
    * Perform Brute-Force Attacks on Remote Access Services for Initial Access

**Web Application Penetration Testing** (15%)

* Perform Web Application Enumeration to Identify Potential Vulnerabilities & Misconfigurations
    * Identify and Exploit Common Web Application Vulnerabilities For Initial Access (SQLi, XSS, Command Injection, etc)
    * Perform Brute-Force Attacks Against Login Forms
    * Exploit Vulnerable and Outdated Web Application Components
    * Exfiltrate Data and Credentials From Compromised Web Applications and Databases

**Exploitation & Post-Exploitation** (25%)

* Identify and Exploit Vulnerabilities or Misconfigurations in Services
    * Identify and Exploit Privilege Escalation Vulnerabilities
    * Dump and Crack Password Hashes
    * Identify Locally Stored Unsecured Credentials

**Exploit Development** (5%)

* Develop/Modify Exploit Code For Initial Access and Post-Exploitation
    * Identify and Exploit Memory Corruption Vulnerabilities (Stack Overflow, Buffer Overflow)

**Active Directory Penetration Testing** (30%)

* Perform Active Directory Enumeration
    * Identify Domain Accounts With Weak or Empty Passwords
    * Perform AS-REP Roasting to Steal Kerberos Tickets for Authentication
    * Perform Active Directory Lateral Movement Techniques (Pass-the-Hash, Pass-the-Ticket)
    * Obtain Domain Admin Privileges/Access

## Resources 📑📘

### 👉 [eCPPT/PTP Cheat Sheet ](ecppt-cheat-sheet.md)📔

> 📖 [Read the Lab Guidelines](https://drive.google.com/file/d/1kgS7gerK5V5yJxOutb12IPMO1-FLf3Yw/view?usp=drive_link) <mark style="color:yellow;">📖</mark>

***

<div align="left"><figure><img src=".gitbook/assets/image (36).png" alt="" width="375"><figcaption><p><a href="https://security.ine.com/certifications/ecppt-certification/">https://security.ine.com/certifications/ecppt-certification/</a></p></figcaption></figure></div>

## 📙 eCPPT - Version 2 (until 2024) <a href="#course-duration-and-topics" id="course-duration-and-topics"></a>

### Course duration & Topics ⏳📚 <a href="#course-duration-and-topics" id="course-duration-and-topics"></a>

\~ 84 hours (_`~56h of videos`_) **8** courses , **85** videos, **83** quizzes, **27** labs

* ****[**System Security**](system-security/) \~ 13 hours
* [**Network Security**](network-security/) \~ 33 hours
* [**PowerShell for Pentesters**](powershell-for-pt/) \~ 6 hours
* ****[**Linux Exploitation**](linux-exploitation/) \~ 9 hours
* [**Web App Security**](web-app-security/) \~ 10 hours
* ****[**Wi-Fi Security**](wi-fi-security/) \~ 6 hours
* ****[**Metasploit & Ruby**](metasploit-and-ruby/) \~ 8 hours

🛣️ [**RoadMap / Exam Preparation** ](roadmap-and-my-experience.md)🧑🏻‍🏫

### E-Links 🔗📔 <a href="#useful-links" id="useful-links"></a>

* Where to find the PTPv2 (Professional Penetration Testing v2) course? - [INE Learning Paths](https://security.ine.com/certifications/ecppt-certification/)
* Where to find the eCPPTv2 certification exam? - [eCPPTv2](https://security.ine.com/certifications/ecppt-certification/)

### [eCPPT](https://security.ine.com/certifications/ecppt-certification/) Exam 📄🖊️ <a href="#ejpt-exam" id="ejpt-exam"></a>

* **Time limit**: 7 days + 7 days for report
* **Expiration date**: no
* **Objectives**:
  * Penetration testing processes and methodologies, against Windows and Linux targets
  * Vulnerability Assessment of Networks
  * Vulnerability Assessment of Web Applications
  * Advanced Exploitation with Metasploit
  * Performing Attacks in Pivoting
  * Web application Manual exploitation
  * Information Gathering and Reconnaissance
  * Scanning and Profiling the target
  * Privilege escalation and Persistence
  * Exploit Development
  * Advanced Reporting skills and Remediation

## Resources 📑📘

### 👉 [eCPPT/PTP Cheat Sheet ](ecppt-cheat-sheet.md)📔

> 📖 [Read the Lab Guidelines](https://assets.ine.com/certifications/exam-guides/eCPPTv2_PRE_EXAM.pdf) <mark style="color:yellow;">📖</mark>

***

## Other Resources 📑📘

### [👉 Preparation RoadMap to pass eCPPT/PTP exam 🛣️](roadmap-and-my-experience.md)

### 👉 [Exam Experience](https://medium.com/@dev-angelist/learning-path-my-experience-for-the-eccptv2-ptp-certification-april-2024-15ddf6b29a8f) (v2) 💯&#x20;

eCPPTv2-PTP-Notes

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README