Talk to Our Team
HomeAboutSolutionsTrainingIndustriesInsightsContactTalk to Our Team
Home/Training/Certified Penetration Testing Professional

Programme Detail

Certified Penetration Testing Professional

The Certified Penetration Testing Professional programme develops advanced, hands-on penetration-testing skills for complex enterprise environments. Participants...

Enquire about this programmeBack to catalogue
Penetration TestingRegistration Open

Programme overview

The Certified Penetration Testing Professional programme develops advanced, hands-on penetration-testing skills for complex enterprise environments. Participants practise multi-layer attacks, pivoting, exploit development, binary analysis, cloud, wireless, mobile, IoT, OT, and professional reporting in a live cyber range. Participants will practise authorised security testing in controlled environments, moving from planning and discovery to technical validation, evidence capture, risk analysis, and professional reporting.

Programmes can be delivered via

HRD Corp Claimable
Yayasan Peneraju aligned
EC-Council

At a glance

Course code
EC-018
Provider
EC-Council
Category
Penetration Testing
Status
Registration Open
Duration
5 days
Price
RM 8,100

What participants should gain

  • Plan and execute advanced enterprise penetration tests
  • Use pivoting and segmentation bypass techniques in complex networks
  • Develop and adapt exploits and analyse vulnerable binaries
  • Assess cloud, wireless, mobile, IoT, and OT environments
  • Produce professional reports with evidence and remediation guidance

Participant readiness

  • Strong networking, operating-system, and ethical-hacking knowledge
  • Hands-on experience with penetration-testing tools and Linux is recommended
  • CEH-level knowledge or equivalent experience is beneficial

Who this course is for

  • Ethical hackers, penetration testers, red-team members, security consultants, and assessors
  • Network, application, cloud, or security professionals developing offensive-testing capability
  • Professionals working only within formally authorised and controlled testing environments

How the course is delivered

This programme will be conducted through interactive lectures, demonstrations, guided labs in isolated environments, controlled attack scenarios, evidence collection, group discussions, reporting exercises, and a final practical assessment.

This programme will be conducted through interactive lectures, demonstrations, guided labs in isolated environments, controlled attack scenarios, evidence collection, group discussions, reporting exercises, and a final practical assessment | By enquiry

Course outline

Module and topic breakdown

Module 1: Advanced Penetration Testing Methodology

Engagement planning, scope, objectives, assumptions, constraints, authorisation, and rules of engagement

Module 2: Enterprise Network Reconnaissance and Attack Planning

Passive and active information gathering on systems, users, applications, and infrastructure

Module 3: Windows and Active Directory Attacks

Domain, forest, trust, user, group, computer, service, policy, and authentication concepts

Module 4: Linux and Network Service Exploitation

Linux file systems, permissions, users, groups, services, packages, processes, logs, and shell history

Module 5: Pivoting, Tunneling, and Accessing Hidden Networks

Routing traffic through compromised hosts to reach otherwise inaccessible networks and services

Module 6: Evasion, Persistence, and Post-Exploitation

Mechanisms for maintaining access through accounts, services, tasks, startup entries, implants, and cloud identities

Module 7: Exploit Development and Shellcode

Payload objectives, processor architecture, memory, calling conventions, and execution flow

Module 8: Binary Analysis and Reverse Engineering

Executable formats, sections, imports, symbols, strings, control flow, and compiler artefacts

Module 9: Web Application and API Penetration Testing

Application architecture, HTTP, sessions, APIs, databases, frameworks, and trust boundaries

Module 10: Wireless and Mobile Penetration Testing

Wireless standards, access points, clients, channels, authentication, encryption, and roaming

Module 11: Cloud Penetration Testing

Preconditions, attack paths, tools, techniques, and indicators associated with Cloud Penetration Testing

Module 12: IoT and Embedded Systems Penetration Testing

IoT devices, sensors, gateways, protocols, cloud platforms, APIs, and lifecycle management

Module 13: OT and SCADA Penetration Testing

Preconditions, attack paths, tools, techniques, and indicators associated with OT and SCADA Penetration Testing

Module 14: Professional Reporting and Cyber Range Assessment

Audience, purpose, scope, methodology, limitations, evidence, and executive summary

Assessment and completion

  • Continuous knowledge checks and facilitator feedback throughout the programme
  • Completion of guided exercises, scenarios, labs, or case-study activities applicable to the course
  • Final review or practical activity to confirm understanding of the stated course objectives
  • Official EC-Council examination and certification requirements depend on the selected training package and current exam version

Availability

This programme has a public intake path. Use the enquiry form below to confirm the next available session or a private cohort.

Programme enquiry

Discuss pricing, delivery, or corporate customisation

Use this form to confirm availability, request pricing clarification, or discuss a private cohort for your organisation.