PJPT — Practical Junior Penetration Tester Preparation Training

About this course map

The PJPT is the entry point to TCM Security's practical track — the Practical Junior Penetration Tester. It is deliberately focused: one attack path, done properly. You start with an internal foothold and work your way to compromising the entire Active Directory domain, then write it up. It is the certification for someone who wants to prove they can do the single most common internal-pentest workflow, before they take on the broader PNPT.

The strength of this exam is its honesty about level. It does not pretend a junior tester needs to write custom exploits. It tests the thing a junior tester is actually hired to do: walk an Active Directory environment from a low-privilege start to full domain compromise, and explain it.

The exam is a hands-on Active Directory compromise followed by a professional report.

Module 01 — Foundations for the internal test

The groundwork a junior tester needs before touching the domain.

Module 02 — Active Directory, explained

You cannot attack what you do not understand. This builds the mental model first.

Module 03 — Initial enumeration

Learning the domain from a low-privilege foothold.

Module 04 — Attacking the domain

The core techniques, taught as a connected path rather than a list.

Module 05 — Lateral movement and escalation

Moving through the domain toward the controller.

Module 06 — The report

Turning the compromise into something a client can act on.