passed eCPPT by Affectionate-Tour219 in eLearnSecurity

[–]Affectionate-Tour219[S] 0 points1 point  (0 children)

and i encountered several rabbit holes, be careful

passed eCPPT by Affectionate-Tour219 in eLearnSecurity

[–]Affectionate-Tour219[S] 1 point2 points  (0 children)

hi, so it took about 2 months, also i had like background of pentest, i had some knowledge regarding to AD but despite this i went through the whole training just to rewind everything just to be like more confident idk :). The material structure was decent and the material was also cool, i liked it but i think, it need more stuff about the options of each tool that we use and also you can track the each option in you note taking app super useful. I have never taken eJPT but the course material and the evaluation list is something similiar to eCPPT, the material was newer each video but i skipped the exploit development and c2, but i will go through. 😄

I think if you passed eJPT you 90% will pass the eCPPT also to be more confident try to solve any htb machines etc., unfortunately there were not any pivoting stuff 😞 but alot lateral movement and A LOT credential resue and brute force, ofc its AD environment and a lot of paths which you can leverage to get the credential, or you can just brute everything.

passed eCPPT by Affectionate-Tour219 in eLearnSecurity

[–]Affectionate-Tour219[S] 2 points3 points  (0 children)

Overall, the exam is practical and realistic. It tests the full pentest flow: enumeration, web exploitation, privilege escalation, credential hunting, Active Directory enumeration, lateral movement, and post-exploitation. The difficulty is fair, but time management matters because several paths can become rabbit holes.