Check Point CCPE-I Infrastructure Hacking Certification Preparation

This hands-on course introduces infrastructure penetration testing, from port scanning all the way to taking over a Windows domain, in a dedicated hack lab. It maps to the Infrastructure Hacking course of Check Point's HackingPoint programme, built with NotSoSecure, and prepares you for the Check Point Certified PenTesting Expert – Infrastructure (CCPE-I) accreditation, exam 156-402. Sessions run live online, in person in Casablanca or on-site at your organization, in French or English. Most of the time is spent attacking lab machines with standard tools such as Nmap, Hydra and Metasploit, so you leave with a repeatable method rather than a list of tricks.

The essentials

Objectives

Program

  1. Port scanning
    • Discovery techniques
    • Nmap
  2. Online password attacks
    • Exposed services
    • Hydra
  3. Hacking databases
    • MySQL
    • PostgreSQL
  4. Metasploit basics
    • Modules and payloads
  5. Password cracking
    • Hash formats
    • Cracking methods
  6. Hacking Unix and Unix application servers
    • Misconfigured services
    • Third-party CMS software
  7. Windows enumeration and client-side attacks
    • Information gathering
    • Targeting the user
  8. Windows privilege escalation and application servers
    • Common escalation paths
  9. Post-exploitation and Windows domains
    • Lateral movement
    • Domain compromise

Prerequisites

Target audience

The exam

The CCPE-I accreditation is earned by passing Check Point exam 156-402. It is offered in English by Pearson VUE and booked separately from the course, whenever suits you. CCPE-I is one of the HackingPoint courses listed in the Check Point certification programme. To prepare, repeat the lab exercises until you can chain enumeration, exploitation and privilege escalation on your own, on both Unix and Windows targets.

Preparation tips

Frequently asked questions (FAQ)

What is HackingPoint?

It is the offensive security training programme Check Point offers with NotSoSecure. It includes Infrastructure Hacking, Web Hacking, Cloud, IoT and Advanced Infrastructure Hacking.

Do I need to know Check Point products?

No. The course is about infrastructure attack techniques in general, not about Check Point firewalls. What matters is a good grasp of networking, Linux and Windows, plus the curiosity to dig into how systems break.

What is the CCPE-I exam code?

It is 156-402, taken with Pearson VUE in English, and you can book it whenever you feel ready.

What comes after CCPE-I?

Advanced Infrastructure Hacking (CCPE-AI) goes deeper on the same themes; Web Hacking (CCPE-W) covers applications.

Which formats and how long?

Live online, in person in Casablanca or on-site at your organization, in French or English. The length is set on request depending on the format and your team's starting level; contact us and we will propose a schedule that leaves enough lab time for every module.

Related trainings

Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.

Securevalley is not a Check Point training partner. Check Point, HackingPoint, CCPE and CCPE-I are trademarks of Check Point Software Technologies.

Related trainings