eCPPT practice examsIn development
INE Security Certified Professional Penetration Tester
A practical exam weighted toward technical depth: real system security including a stack buffer overflow understood well enough to adapt a public exploit, and network pivoting through segmented networks with port forwards, SOCKS proxies and double pivots while tracking which host carries the traffic; then the web attack surface tested as the external foothold, an Active Directory compromise reached through the pivot, and a professional penetration test report that integrates the whole chain and is graded alongside the compromise.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| System attacks, network pivoting and exploit fundamentals | Not published |
| Web attacks, Active Directory and reporting | Not published |
Two sample questions
1. What does a command injection vulnerability allow?
- Execution of database statements because input alters the query sent
- Reading of arbitrary files because the path is taken from the request
- Execution of script in the visitor's browser rather than on the server
- Execution of operating system commands because input reaches a shell — correct
Why: When input is passed to a shell, metacharacters let additional commands be appended, giving execution on the host with the privileges of the process.
2. Why does a payload need to fit the available space?
- Too large a payload gets truncated — correct
- Large payloads run faster
- Space has no effect on shellcode
- Larger payloads avoid bad characters
Why: If the buffer cannot hold the whole payload, it is truncated and the exploit fails, so size is managed.
The real eCPPT exam
| Length | 7 days of testing, then time to report |
|---|---|
| Questions | Practical: a segmented network engagement plus a professional report |
| Pass mark | Compromise of the objectives and an acceptable professional report |
| Price | Sold through INE, often bundled with a training subscription |
| Recommended before you sit it | None enforced. INE penetration testing training is recommended preparation. |
| Valid for | Does not expire |
Exam facts as published by INE Security; always check the vendor’s page before you book.
Study eCPPT with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.