> For the complete documentation index, see [llms.txt](https://caesar3.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://caesar3.gitbook.io/notes/general/certification-reviews/ecppt-review.md).

# eCPPT Review

{% embed url="<https://certs.ine.com/e4ccfe8c-407a-4b7d-9293-d558b2a3241d>" %}
My eCPPT Certification
{% endembed %}

## Introduction:

Hello, this is Caesar3, and I will write my review about the eCPPT exam and course.

I did some boxes on several platforms including THM and HTB, and I have a good knowledge about the technical penetration testing phases.

## Course Content:

The course content is enough to pass the exam except the active directory penetration testing section where you have to go for other resources like HTB, because it was taught in an only assumed breach scenario from a windows machine, and I will mention some good machines to do before starting the exam to practice doing the attacks from Linux systems.

## Exam:

The exam is 45 multiple questions in 24 hours, and as you go through the exam you can answer, also you do not need to write a report, there was 1 Linux and 4 Windows machines including the active directory.

## Tips:

* Use the wordlists in the desktop folder, they will be enough.
* If you get stuck try to brute force.
* Useful Tools:
  * Crackmapexec
  * Impacket Suite of tools
  * kerbrute
  * john
  * xfreerdp
  * msfconsole
  * nmap
  * hydra
  * wpscan
  * smbclient
* Scripts:
  * PowerView\.ps1
  * PowerUp.ps1

## Recommended Machines:

#### For linux machines if can do up to medium machines on THM you will be fine.

#### For windows:

* THM:
  * There are some windows and active directory machines.
* HackMyVM (You can download those machines and hack them offline):
  * DC01
  * DC02
  * DC03
* HTB:
  * Easy & Medium machines in Active Directory 101 track
  * Easy and if you can do the medium machines in the Intro to Zephyr track
  * Jeeves

## Conclusion:

I think it is a good start in the penetration testing field, but I myself prefer going for PNPT or CPTS since they are in the same range of cost.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://caesar3.gitbook.io/notes/general/certification-reviews/ecppt-review.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.