eCPPT Review

Here is my review of the eCPPTv3.

Accredible • Certificates, Badges and BlockchainAccredible • Recipient Portal

My eCPPT Certification

Introduction:

Hello, this is Caesar3, and I will write my review about the eCPPT exam and course.

I did some boxes on several platforms including THM and HTB, and I have a good knowledge about the technical penetration testing phases.

Course Content:

The course content is enough to pass the exam except the active directory penetration testing section where you have to go for other resources like HTB, because it was taught in an only assumed breach scenario from a windows machine, and I will mention some good machines to do before starting the exam to practice doing the attacks from Linux systems.

Exam:

The exam is 45 multiple questions in 24 hours, and as you go through the exam you can answer, also you do not need to write a report, there was 1 Linux and 4 Windows machines including the active directory.

Tips:

• Use the wordlists in the desktop folder, they will be enough.

• If you get stuck try to brute force.

• Useful Tools:

  • Crackmapexec

  • Impacket Suite of tools

  • kerbrute

  • john

  • xfreerdp

  • msfconsole

  • nmap

  • hydra

  • wpscan

  • smbclient

• Scripts:

  • PowerView.ps1

  • PowerUp.ps1

Recommended Machines:

For linux machines if can do up to medium machines on THM you will be fine.

For windows:

• THM:

  • There are some windows and active directory machines.

• HackMyVM (You can download those machines and hack them offline):

  • DC01

  • DC02

  • DC03

• HTB:

  • Easy & Medium machines in Active Directory 101 track

  • Easy and if you can do the medium machines in the Intro to Zephyr track

  • Jeeves

Conclusion:

I think it is a good start in the penetration testing field, but I myself prefer going for PNPT or CPTS since they are in the same range of cost.