- Duration: 5 days
Course Overview
The PECB Certified Advanced Penetration Tester (CAPT) training course is designed for experienced cybersecurity professionals seeking to strengthen their practical penetration testing capabilities and assess the security of complex enterprise environments.
As cyber threats become increasingly sophisticated, organizations require specialists who can identify vulnerabilities, validate security controls, and simulate realistic attack scenarios. This five-day course combines structured instruction with hands-on practical exercises covering advanced reconnaissance, web exploitation, privilege escalation, post-exploitation, Active Directory attacks, lateral movement, evasion techniques, and network pivoting.
Participants will learn to assess hardened systems from an attacker’s perspective, identify potential weaknesses across interconnected environments, and evaluate the effectiveness of security monitoring and defensive controls. The course also emphasizes professional reporting and actionable remediation guidance to help organizations strengthen their cybersecurity posture.
Upon successful completion of the examination and fulfilment of the applicable experience and project requirements, participants can apply for the PECB Certified Advanced Penetration Tester (CAPT) credential.
Learning Objectives
By the end of this training course, participants will be able to:
- Perform advanced reconnaissance and threat modelling to identify potential attack paths and vulnerabilities.
- Execute advanced exploitation techniques to assess hardened targets and complex attack surfaces.
- Establish and maintain controlled footholds using persistence mechanisms and covert communication channels.
- Apply privilege escalation and lateral movement techniques across systems and Active Directory environments.
- Assess authentication mechanisms and identify weaknesses in credential security.
- Evaluate defensive controls through controlled evasion and adversarial testing techniques.
- Plan and conduct realistic penetration tests and red team operations within authorized environments.
- Document technical findings and prepare professional reports containing actionable remediation recommendations.
Target Audience
This training course is intended for:
- Experienced Penetration Testers seeking to advance their technical capabilities and conduct more complex security assessments.
- Red Team Members and Adversary Simulation Analysts aiming to improve attack simulation and defensive validation techniques.
- Security Consultants responsible for conducting advanced technical assessments and identifying high-impact vulnerabilities.
- Threat Hunters and Incident Responders seeking deeper insight into advanced attacker behaviour and post-exploitation techniques.
- Security Architects and Engineers involved in designing, evaluating, and validating enterprise security controls.
- Senior Cybersecurity Professionals preparing for advanced technical responsibilities or certifications requiring practical penetration testing expertise.
Course Content
Day 1: Advanced Reconnaissance and Threat Modelling
- Training Course Objectives and Structure
- Advanced Open-Source Intelligence (OSINT)
- Network Mapping and Service Enumeration
- Web Application Architecture Analysis
Day 2: Advanced Web Exploitation and Initial Access
- Fuzzing and Input Validation Attacks
- Client-Side Attacks and Injection Techniques
- Remote Code Execution (RCE)
- Shell Stabilization and Persistence
Day 3: Post-Exploitation, Privilege Escalation, and Credential Attacks
- Advanced Authentication Attacks
- Linux Post-Exploitation Techniques
- Evasion and Defensive Control Avoidance
Day 4: Active Directory, Windows Privilege Escalation, and Pivoting
- Active Directory Reconnaissance
- Active Directory Compromise and Lateral Movement
- Windows Local Privilege Escalation
- Network Pivoting and Tunnelling
- Course Review and Closing Session
Day 5: Certification Examination
- Review of Key Course Concepts
- Preparation for the Certification Examination
- PECB Certified Advanced Penetration Tester Examination
Examination and Certification
The PECB Certified Advanced Penetration Tester examination assesses participants’ knowledge and competencies in advanced penetration testing, exploitation, post-exploitation, and professional reporting.
Examination duration: 3 hours
The examination covers the following competency domains:
- Passive and Active Reconnaissance
- Threat Modelling and Vulnerability Identification
- Exploitation and Initial Access Techniques
- Post-Exploitation Techniques and Data Exfiltration
- Documentation and Reporting
The examination follows the PECB Examination and Certification Program (ECP) requirements. Details regarding examination formats, available languages, and applicable rules are provided by PECB.
Certification Requirements
Candidates who successfully pass the examination can apply for the following credential, subject to fulfilling the applicable certification requirements.
PECB Certified Advanced Penetration Tester (CAPT)
- Examination: PECB Certified Advanced Penetration Tester examination or equivalent.
- Professional Experience: Five years of professional experience, including two years of work experience in penetration testing and cybersecurity.
- Project Experience: 300 hours of project experience.
- Other Requirements: Signing the PECB Code of Ethics.
A certificate is issued once the candidate fulfils all applicable requirements for the credential.
Course Benefits
By completing this training course, participants will be better equipped to:
- Conduct Advanced Security Assessments: Evaluate complex enterprise environments using structured penetration testing methodologies.
- Identify High-Impact Vulnerabilities: Explore advanced exploitation and vulnerability identification techniques to uncover weaknesses that may be missed by basic assessments.
- Assess Enterprise Identity Security: Investigate Active Directory security, authentication weaknesses, privilege escalation, and lateral movement risks.
- Evaluate Defensive Capabilities: Conduct authorized adversarial testing to assess security monitoring, detection, and response controls.
- Support Red and Purple Team Exercises: Contribute to controlled attack simulations and collaborative security validation activities.
- Improve Security Reporting: Translate technical findings into clear, actionable recommendations that support organizational risk management and remediation.
- Advance Professional Development: Pursue the PECB Certified Advanced Penetration Tester credential, subject to the relevant examination and certification requirements.
Training Materials and CPD Credits
- Training Materials: Participants receive more than 300 pages of comprehensive course materials, including practical examples, exercises, and quizzes.
- CPD Credits: Participants who complete the training course receive an attestation of course completion worth 31 Continuing Professional Development (CPD) credits.
- Examination and Certification Fees: Included in the training course price.
- Examination Retake: Participants who attend the course through a PECB partner and fail their first examination attempt are eligible for one free retake within 12 months of the course completion date, subject to PECB’s applicable rules. Additional fees may apply outside these conditions.
Prerequisites
This course is intended for experienced cybersecurity practitioners. Participants should ideally have a solid understanding of networking, operating systems, web technologies, and fundamental penetration testing methodologies to benefit fully from the advanced practical content.
The CAPT credential also requires the specified professional and project experience in addition to passing the examination.
Certification Body
PECB (Professional Evaluation and Certification Board)
PECB provides professional training, examination, and certification services across cybersecurity, information security, governance, risk, and compliance disciplines.