What the course covers
About this course map
The eCPPT — eLearnSecurity Certified Professional Penetration Tester — sits a rung above the entry-level practical certifications and covers the full breadth of a penetration test: the network, the web application, the Windows domain, and the report that ties them together. It built its reputation on a realistic, multi-day exam at a time when most certifications were still multiple choice, and it remains a solid mid-level proof that someone can run an engagement end to end.
This preparation programme is broad by design. It suits someone who has an entry-level practical certification or equivalent experience and wants to round out the gaps — the web attacks a network tester skips, the pivoting a web tester never learns, the buffer overflow everyone means to study and never does.
The exam is a multi-day practical engagement culminating in a full professional report, graded on both the compromise and the write-up.
Module 01 — Penetration-testing methodology
The frame the whole engagement hangs on.
Module 02 — Network security testing
The network half of the engagement.
Module 03 — Buffer overflow fundamentals
The exploit-development slice the exam expects you to handle.
Module 04 — Web application attacks
The web half, which many network testers under-invest in.
Module 05 — Pivoting and lateral movement
Moving through a network from a single foothold — the eCPPT's signature strength.
Module 06 — Windows Active Directory attacks
Compromising the domain.
Module 07 — The professional report
The deliverable that decides half the grade.
Exam & certification
- 1Train with us40 hours of instructor-led preparation, labs and practice questions.
- 2Sit the official examExam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date.
- 3Get certifiedThe certification is awarded by eLearnSecurity when you pass their exam.
What you receive
- eLearnSecurity certification — issued by eLearnSecurity after you pass, and verifiable with them.
- Hacky Security certificate of completion — for the training itself, with a unique ID.
- Checkable by employers — anyone can confirm our certificate on the Verify page.
This course is Hacky Security’s own preparation training. The certification itself is awarded by eLearnSecurity, not by us.
Similar courses
Independent preparation training delivered from Hacky Security's own curriculum. Hacky Security is not affiliated with or endorsed by the certification body named above. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.
