What the course covers
About this course map
The PJPT is the entry point to TCM Security's practical track — the Practical Junior Penetration Tester. It is deliberately focused: one attack path, done properly. You start with an internal foothold and work your way to compromising the entire Active Directory domain, then write it up. It is the certification for someone who wants to prove they can do the single most common internal-pentest workflow, before they take on the broader PNPT.
The strength of this exam is its honesty about level. It does not pretend a junior tester needs to write custom exploits. It tests the thing a junior tester is actually hired to do: walk an Active Directory environment from a low-privilege start to full domain compromise, and explain it.
The exam is a hands-on Active Directory compromise followed by a professional report.
Module 01 — Foundations for the internal test
The groundwork a junior tester needs before touching the domain.
Module 02 — Active Directory, explained
You cannot attack what you do not understand. This builds the mental model first.
Module 03 — Initial enumeration
Learning the domain from a low-privilege foothold.
Module 04 — Attacking the domain
The core techniques, taught as a connected path rather than a list.
Module 05 — Lateral movement and escalation
Moving through the domain toward the controller.
Module 06 — The report
Turning the compromise into something a client can act on.
Exam & certification
- 1Train with us24 hours of instructor-led preparation, labs and practice questions.
- 2Sit the official examExam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date.
- 3Get certifiedThe certification is awarded by TCM Security when you pass their exam.
What you receive
- TCM Security certification — issued by TCM Security after you pass, and verifiable with them.
- Hacky Security certificate of completion — for the training itself, with a unique ID.
- Checkable by employers — anyone can confirm our certificate on the Verify page.
This course is Hacky Security’s own preparation training. The certification itself is awarded by TCM Security, not by us.
Similar courses
Independent preparation training delivered from Hacky Security's own curriculum. Hacky Security is not affiliated with or endorsed by the certification body named above. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.
