TCM Security's PNPT (Practical Network Penetration Tester) mirrors a real penetration test: five days to assess an environment, two days to write the report, then a live debrief with experienced penetration testers. This five-day bootcamp helps you structure your method, prepare the report and practise presenting your findings.
Run an external then internal penetration test with a clear methodology
Use open-source intelligence (OSINT) during reconnaissance
Assess the security of an Active Directory domain
Document findings with evidence and recommendations
Present results orally to a technical audience
Program
Reconnaissance and OSINT
Public information gathering
Mapping the external perimeter
External testing
Assessing exposed services
Gaining initial access within an authorised scope
Internal testing and Active Directory
Domain enumeration
Assessing paths to privileged accounts
Reporting and debrief
Report structure and recommendations
Preparing the 15-minute debrief
Prerequisites
Solid networking and Windows/Linux fundamentals
Some junior-level penetration testing practice
Comfortable technical English, written and spoken
Target audience
Junior penetration testers
System and network administrators moving into offensive security
Candidates seeking a certification focused on Active Directory and reporting
The exam
The PNPT exam has no multiple-choice questions and no flags: candidates have five days to carry out the test, then two days to write a professional report, followed by a live debrief of about 15 minutes. There is no proctor, but the exam network is monitored. The voucher, valid for 12 months, includes one free retake and online training courses. According to TCM Security, the certification does not expire.
Preparation tips
Practise writing a complete report before the exam
Prepare the debrief like a client readout
If you are new to pentesting, TCM suggests starting with PJPT
Frequently asked questions (FAQ)
Does PNPT expire?
No. According to TCM Security, the certification does not expire.
Is a retake included?
Yes, the voucher includes one free retake and is valid for 12 months.
PNPT, CPTS or OSCP+?
All three are hands-on. PNPT emphasises OSINT, Active Directory and the live debrief; CPTS a detailed report over ten days; OSCP+ a close-to-24-hour exam.
Which course formats?
Live online, in person in Casablanca or on-site at your organization, in French or English.