Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

View Schedule & Pricing
Get a Quote
Book a Meeting

Popular Searches

CISSP Security+ AWS Azure CCNA CompTIA Cloud Cybersecurity

Quick Links

Training Camp's 5-day EC-Council CPENT boot camp covers advanced penetration testing: network, web, IoT, and cloud. The practical hands-on exam for experienced pentesters. Exam voucher included.

EC-Council CPENT Boot Camp – CPENT: 24 hours. Your coffee gives up.

EC-Council Partner of the Year

Train for it in 5 days. Free Retake Guarantee.

Our 5-day EC-Council CPENT penetration testing certification boot camp includes official courseware, hands-on labs and your exam voucher. Train live online or in person.

View Price & Schedules Get Team Quote
Student
Student
Student
Join 250,000+ certified alumni.
Verified for the current CPENT AI exam
Emilio Vespar, Training Camp mascot, in a zip hoodie

Free Retake

Exam Protection Included

Official EC-Council

Authorized Training

Live online or in person. Same instructors.

Start Monday. Finish Friday. Hands-on labs. Voucher included.

Five days of live, hands-on prep for CPENT, live online or in person with the same instructors. The Free Retake Guarantee has your back.

Program Abstract

REF: CPENT AI 6
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 5

The CPENT is Hard. We Know How to Pass It.

This intensive 5-day boot camp program covers all domains of the CPENT AI certification, teaching you proven strategies to pass on your first attempt. Our expert instructors guide you through the material with hands-on exercises and real-world scenarios. By Friday, you’ll be ready to schedule your 24-hour range exam.

Official EC-Council Training.

Third-party materials can’t keep up with exam changes. We use EC-Council’s authorized courseware, so you’re studying exactly what’s on the test—not outdated guesswork.

System Integrity Check
Content Source EC-Council Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$999 exam voucher included with your enrollment. No surprise costs, no last-minute purchases—just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $999 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with exam-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Your Exam, Scheduled.

CPENT AI is a 24-hour practical exam on EC-Council’s live cyber range, taken online as one session or two 12-hour sessions. We help you schedule it after class and your voucher and free retake are included.

Friday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Our instructors work in the fields they teach, not just in the classroom.

"I teach what works on real engagements, and how to write it up so it gets fixed."

Eric Beasley

Lead Instructor • CISSP, CEH All of our trainers carry a wide range of certifications, including the certification for every program they teach or manage.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • Group whiteboard sessions
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Advanced Cyber Range Training

Prepare for CPENT in a live cyber range built around real-world attack scenarios, so you practice techniques the exam demands before facing them.

Clock icon

24 Hour Exam

Prove your skills on the CPENT exam, a grueling, performance-based 24-hour challenge where you attack a live range rather than answer multiple-choice questions.

Flower icon

IoT and SCADA

Learn to test and secure IoT devices and industrial SCADA systems in the CPENT boot camp, two environments most penetration testers never practice against.

Light bulb icon

Exploit Development

Practice binary exploitation and privilege escalation in guided labs, writing and running working exploits against real targets instead of reading about them.

Stars icon

Advanced Pivoting

Practice pivoting through firewalls and segmented networks, moving from an initial foothold deep into protected subnets the way real attackers do.

Sunglasses icon

LPT Master Track

Score 90% or higher on the CPENT exam and you earn EC-Council’s elite LPT Master title along with your CPENT certification.

EC-Council CPENT Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    EC-Council CPENT Certification
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info
    MODULE_ID: PREP
    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    This boot camp prepares you to perform real-world penetration tests in a live cyber range.
    L.prep.1
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: CPENT-01
    Live Training QS: ~5
    DAY 1
    Critical Path

    Methodology, Scoping, OSINT, and Social Engineering

    Penetration Testing Types, Phases, and Methodologies
    L.01.1
    Scoping, Rules of Engagement, and Legal Agreements
    L.01.2
    Engagement Planning, Team Roles, and Communication
    L.01.3
    AI-Assisted Penetration Testing Workflows and Limits
    L.01.4
    OSINT Sources: Domains, Certificates, Code, and People
    L.01.5
    Recon Tooling: Amass, theHarvester, Shodan, and Maltego
    L.01.6
    Lab: Building an Attack Surface Map From OSINT
    L.01.7
    Lab: AI-Assisted Recon and Target Correlation
    L.01.8
    Social Engineering Vectors and Pretexting
    L.01.9
    Phishing Campaign Design With GoPhish
    L.01.10
    Credential Harvesting and Payload Delivery
    L.01.11
    Physical and Telephone-Based Social Engineering
    L.01.12
    Evaluating Human-Layer Controls and Awareness
    L.01.13
    Documenting Social Engineering Findings
    L.01.14
    Lab: Building and Launching a Phishing Campaign
    L.01.15
    Lab: Cloning a Portal for Credential Capture
    L.01.16
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: CPENT-02
    Live Training QS: ~6
    DAY 2
    Critical Path

    Web Application, API, and Perimeter Evasion

    Web App Mapping, Discovery, and Enumeration
    L.02.1
    Injection, XSS, SSRF, and XXE Exploitation
    L.02.2
    Authentication, Session, and Access Control Attacks
    L.02.3
    REST and GraphQL API Enumeration and Abuse
    L.02.4
    JSON Web Token Attacks and Authentication Bypass
    L.02.5
    Business Logic and File Upload Vulnerabilities
    L.02.6
    Lab: Exploiting a Vulnerable Web Application
    L.02.7
    Lab: Attacking an API and Forging JWTs
    L.02.8
    Firewall Rule Discovery and Evasion Techniques
    L.02.9
    IDS/IPS Signature Evasion and Fragmentation
    L.02.10
    Antivirus and EDR Evasion Fundamentals
    L.02.11
    Tunneling and Protocol Encapsulation
    L.02.12
    Egress Filtering Bypass and Covert Channels
    L.02.13
    Router and Switch Attack Techniques
    L.02.14
    Lab: Evading a Firewall and IDS
    L.02.15
    Lab: Establishing a Covert Egress Channel
    L.02.16
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: CPENT-03
    Live Training QS: ~6
    DAY 3
    Critical Path

    Windows, Active Directory, and Linux Exploitation

    Windows Enumeration and Initial Foothold
    L.03.1
    Windows Privilege Escalation Techniques
    L.03.2
    Active Directory Enumeration With BloodHound
    L.03.3
    Kerberoasting, AS-REP Roasting, and Pass-the-Hash
    L.03.4
    Delegation Abuse and Domain Privilege Escalation
    L.03.5
    Credential Dumping and Persistence
    L.03.6
    Lab: Escalating Privileges on Windows
    L.03.7
    Lab: Compromising an Active Directory Domain
    L.03.8
    Linux Enumeration and Service Exploitation
    L.03.9
    SUID, Sudo, and Capability Abuse
    L.03.10
    Kernel and Misconfiguration-Based Escalation
    L.03.11
    Cron, PATH, and Writable File Exploitation
    L.03.12
    Container Escape and Host Pivoting Basics
    L.03.13
    Collecting and Reusing Linux Credentials
    L.03.14
    Lab: Escalating Privileges on a Linux Host
    L.03.15
    Lab: Chaining Linux Misconfigurations to Root
    L.03.16
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: CPENT-04
    Live Training QS: ~7
    DAY 4
    Critical Path

    Binary Exploitation, Pivoting, and IoT

    Reverse Engineering Fundamentals With Ghidra
    L.04.1
    Stack-Based Buffer Overflow Exploitation
    L.04.2
    Fuzzing for Crashes and Input Validation Flaws
    L.04.3
    Shellcode Basics and Exploit Development Workflow
    L.04.4
    Exploit Mitigations: DEP, ASLR, and Bypass Concepts
    L.04.5
    Analyzing and Weaponizing a Vulnerable Binary
    L.04.6
    Lab: Exploiting a Stack Buffer Overflow
    L.04.7
    Lab: Fuzzing a Service to Find a Crash
    L.04.8
    Lateral Movement Techniques Across Hosts
    L.04.9
    Single and Double Pivoting Through Segmented Networks
    L.04.10
    Port Forwarding and SOCKS Proxy Tunneling
    L.04.11
    Pivoting Into Hidden and Filtered Subnets
    L.04.12
    IoT and Embedded Device Attack Surfaces
    L.04.13
    Firmware Analysis and Protocol Attacks
    L.04.14
    Lab: Double Pivoting Into a Segmented Network
    L.04.15
    Lab: Assessing an IoT Device and Firmware
    L.04.16
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: CPENT-05
    Live Training QS: ~7
    DAY 5
    Critical Path

    Reporting, Capstone, and Exam Preparation

    Penetration Test Report Structure and Executive Summary
    L.05.1
    Technical Findings, Evidence, and Remediation Guidance
    L.05.2
    Post-Testing Cleanup and Retest Planning
    L.05.3
    OT and SCADA Penetration Testing Concepts
    L.05.4
    Cloud Penetration Testing Across AWS, Azure, and GCP
    L.05.5
    Database and Mobile Penetration Testing Overview
    L.05.6
    Lab: Writing a Professional Penetration Test Report
    L.05.7
    Lab: Assessing a Cloud and Database Target
    L.05.8
    CPENT Practical Exam Format and Range Rules
    L.05.9
    Time Management Across a 24-Hour Engagement
    L.05.10
    Attack Path Planning and Flag Capture Strategy
    L.05.11
    Report Submission Requirements and Timeline
    L.05.12
    Scoring Thresholds for CPENT and LPT (Master)
    L.05.13
    Lab: Full-Scope Penetration Test Simulation
    L.05.14
    Lab: Timed Range Challenge With Report Deliverable
    L.05.15
    Capstone Review and Range Readiness Debrief
    L.05.16
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: POST
    Live Training QS: ~8
    AFTER CLASS
    Critical Path

    After Class

    Progress Buffer 80% ALLOCATED
    09:00
    End 17:00
    COURSE PROGRESS Day 0 of 5
    FREQUENTLY ASKED QUESTIONS

    EC-Council CPENT Certification
    FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    CPENT (now CPENT AI) is EC-Council’s advanced, fully practical penetration testing certification. The exam is a 24-hour live cyber range engagement covering network, web, IoT and OT, cloud, Active Directory, binary exploitation, pivoting and double pivoting, and AI-assisted testing, finished with a professional report. Score 70% to earn CPENT AI, or 90% to also earn LPT Master.

    The exam is a 24-hour performance-based test, taken in one session or split into two 12-hour sessions, with real-world network challenges in a live cyber range.

    You’ll develop skills in IoT/SCADA testing, binary exploitation, privilege escalation, pivoting, and advanced reporting.

    Ideal for ethical hackers, pen testers, network security pros, and anyone aiming for advanced red team roles.

    CPENT focuses on enterprise-level attacks with broader scenarios like double pivoting and SCADA, while OSCP is more Linux and exploit-focused.

    You need to earn EC-Council Continuing Education (ECE) credits within three years or retake the latest version of the exam to stay certified.

    Get the Free
    CPENT Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    EC-Council CPENT Certification
    Study Tools & Resources

    Your journey to EC-Council CPENT certification requires the right preparation strategy. We’ve gathered expert insights to help guide your path to success.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    Featured Story
    ★★★★★

    The Certified Ethical Hacker training program provided by Training Camp was very enjoyable, useful and extremely worthwhile. for our team.

    AC
    Ama*** Car*** A**OM
    ★★★★★

    Took CISSP and CEH with Training Camp and I owe part of my success to their course and instructor expertise.

    NR
    Nat* Roc** U**Govt
    ★★★★★

    Training Camp was exactly what I needed to get my CISSP. It was so intimidating at first but they got me across the finish line after a 1-week boot camp with th...

    CR
    Chr**** Rob**** A**mai
    ★★★★★

    If it wasn’t for Training Camp I would not have gotten my CISSP. I loved their program!

    Continue Your Journey

    CPENT Related Courses

    Advance your career with these recommended certifications

    Featured on