CPENT AI Training – Certified Penetration Testing Professional
CPENT AI is EC-Council's advanced penetration testing programme. Across 40 hours you attack segmented, realistic environments: Active Directory, web applications and APIs, filtered perimeters, IoT devices and vulnerable binaries. You earn the credential through a fully hands-on 24-hour exam followed by a professional report. We run it as a live online class, in person in Casablanca or on-site at your organization, in French or English.
Scope an engagement: boundaries, rules of engagement and deliverables
Carry out OSINT reconnaissance and social engineering tests
Compromise web applications, APIs and JSON Web Tokens
Evade perimeter defences and escalate privileges on Windows and Linux
Attack an Active Directory domain and pivot across segmented networks
Exploit binaries through fuzzing and reverse engineering, and test IoT devices
Write a pentest report that works for both executives and engineers
Program
Methodologies and scoping
Penetration testing and methodologies
Scoping and engagement
OSINT and social engineering
Open-source intelligence
Social engineering testing
Web and APIs
Web application pentesting
API and JSON Web Token testing
Perimeter and systems
Perimeter defence evasion
Windows exploitation and privilege escalation
Linux exploitation and privilege escalation
Active Directory and lateral movement
Active Directory pentesting
Lateral movement and pivoting
Advanced exploitation and IoT
Reverse engineering, fuzzing and binary exploitation
IoT pentesting
Reporting
Report writing and post-testing actions
Prerequisites
At least two years of information security experience, or
CEH certification or equivalent knowledge
Comfort with the Linux and Windows command line
Target audience
Penetration testers and technical auditors ready for the next level
Red team members
CEH holders looking for a fully hands-on credential
Security consultants and experienced SOC engineers
The exam
The CPENT exam is entirely hands-on: you take it either as one 24-hour session or as two 12-hour sessions. You then have seven days to submit your penetration test report. A score between your exam form's cut score and 89% earns CPENT; 90% or higher also earns the LPT (Licensed Penetration Tester) title. The 40-hour training must be completed before you attempt the exam.
Preparation tips
Practise pivoting across several subnets until you can do it without notes
Choose the 2 × 12 h format if you want to sleep between sessions
Build your report as you go, with timestamped screenshots and commands
Frequently asked questions (FAQ)
What is the difference between CPENT and LPT?
It is the same exam. A score up to 89% earns CPENT, while 90% or more also earns LPT, the top credential in EC-Council's pentest track.
Is CEH mandatory?
No. Either CEH or at least two years of information security experience is enough to enrol. Without one or the other, the step up is steep, so we recommend starting with CEH first.
Can the exam be split?
Yes. You can choose two 12-hour sessions instead of one continuous 24-hour session, which many candidates find easier to manage.
What does "AI" mean in CPENT AI?
It is the programme's current name. We show where AI tools can speed up certain steps, without replacing a sound methodology.
How long do I have to submit the report?
Seven days after your final exam session. The report is part of the assessment, so it must set out the vulnerabilities found, proof of exploitation and clear recommendations. We spend part of the course on how to structure it well.