// about
The CNPen is an intermediate-level practical certification by PentestingExams that tests a candidate's ability to conduct full internal and external network penetration tests. The exam covers a wide attack surface: from initial network scanning and service exploitation through Active Directory lateral movement, cloud API abuse, and Docker container escapes, requiring real exploitation skills across multiple technologies in a live environment.
// topics covered
Network Scanning (Nmap)
Service Exploitation (Tomcat)
Active Directory Attacks
NTLM Hash Cracking
SMB Enumeration
Lateral Movement
Token Impersonation
OSINT Reconnaissance
AWS API Exploitation
SSRF (Server-Side Request Forgery)
AWS IAM Credential Theft
SSH Key Exploitation
Linux Privilege Escalation
Docker Breakout
// tags
// certificate
Credential ID: 11069457