eCPPTv2 Review

In this video, I discuss my views on the eCPPTv2 certification by eLearn Security and INE. Let me know if you have any questions or would like clarification on anything I mentioned. Thanks for watching!
Interested in CTFs and getting started hacking? Check out my HackTheBox starting series and follow along as we hack our way to victory.
Check out HackTheBox ProLabs for $95 December discount!
HackTheBox ProLabs: www.hackthebox...
GitHub: github.com/Ros...
LinkedIn: / chandler-rose
HackTheBox: app.hackthebox...

[@rosehacksyoutube]

If you would like to check out my eCPPTv2 notes, they can be found on my GitHub in the description.

[@MohamedAfzal]

totally how many machines ? is the exam based on questions or just pentest a network?

[@rosehacksyoutube]

Can’t say how many. I don’t remember for one. But the network is very small. No more than 6 or 7 machines.

[@MauricioHirano-f6r]

Bailey Views

[@peeetew]

thank you!

[@rosehacksyoutube]

Watch out for my eJPT review!

[@HamnetsWorld]

8:10 I’d appreciate a tutorial on setting up buffer overflow inside of a virtual machine that would be awesome bro

[@rosehacksyoutube]

Coming soon!

[@cyphercoda4575]

I agree, the initial RCE was not stable so we had to set up our own shell to maintain a persistent shell.

[@eliasgarcia3694]

Great review! Readying up for the eJPT right now. About how much total time did you take to get your eJPT to eCPPT?

[@rosehacksyoutube]

I believe I jumped straight into eCPPT after eJPT, and studied for about 2 1/2 months before attempting. I was studying around 8-10 hours a day.

[@HamnetsWorld]

seems like the kinda guy who wakes up at 4am makes a cup of coffee and start grinding. Great review, very well spoken. I haven’t seen a review on a course like this so well done. Looking forward to more

[@rosehacksyoutube]

I appreciate that!

[@brianfalcutila2973]

The best gift I received was that we spent time together as a family❤️🇵🇭

[@rosehacksyoutube]

Can’t beat that!

[@khurramsaqib5890]

Is the course instructor available to answer any questions that one may have or everything is just based off of the course videos?

[@rosehacksyoutube]

If I remember correctly it’s just based on the videos and text, but if you have a question you may be able to get in touch with them. I wouldn’t count on it without searching first.

[@filmartfear3035]

Thanks. How hard would you say the exam was? How much experience did you have prior to taking it?

[@rosehacksyoutube]

I had about 2-3 months of playing capture the flags and the eJPT certification under my belt. I was spending anywhere from 8-22 hours a day studying and practicing though. So it was more than full time!

[@underdogproductions7750]

Thanks for the review!

[@rosehacksyoutube]

Thanks for the comment!

[@Mmm-qm9ri]

is ecppt enough to find work?

[@0xrohit54]

Hello sir thank you for video and i am taking my exam on 1st Week of Jan and i have gone through taken notes in pivoting and i practiced some Bufferoverflow rooms but i am little bit scared on Privelege escalation and i am sure i can tackle linux but when comes to windows i am weak ..can you share some tips on privelege escalation and what was the tool you recommedation for stable connection while pivoting as many advised sometime pivot causes some issues and please share some tips on last minute preparation as i have only nearly 10 days

[@rosehacksyoutube]

Thanks for watching! And I would recommend going through the Buffer Overflow room “GateKeeper” a few times from TryHackMe, big wink. For Windows Privilege escalation I would recommend knowing how to use Meterpreter! The exam is made in a way where Metasploit is almost needed. It will make your life 1000 times easier for sure. Pivoting can be unstable at times. I would recommend playing around with the different payloads in Metasploit. Some payloads may offer a more stable connection. If you want to practice pivoting, I recommend Dante from HackTheBox. It’s $95 off right now. That’s was I used to practice my pivoting. 10 days should be enough time to get some practice. If you want help with it, I have a Discord as well.

[@0xrohit54]

@@rosehacksyoutube i will join discord if i have any queries brother and thanks for your reply

[@0xrohit54]

Can you please share your discord link brother

[@rosehacksyoutube]

@@0xrohit54 discord.gg/MRgMxnFU

[@peterhelland5154]

Great review! I have a question tho regarding Metasploit Framework. You mentioning that you recommend learning Metasploit, you mean know how to build custom modules in MSF in Ruby? Or just simply know how to make a workspace, importing Nmap scans, using auxiliary/exploit/post modules? Also, did you need to avoid AV detection?

[@rosehacksyoutube]

You certainly do not need to know how to build custom modules in MSF. Simply knowing how to navigate MSF will be enough. I would understand AV evasion techniques prior to going into the exam, but nothing overly complicated is required when it comes to this.

[@peterhelland5154]

@@rosehacksyoutube Okey perfect! I recently passed my eJPTv2 exam and will be starting the eCPPTv2 course :) I feel comfortable with MSF, but not building modules in Ruby, so great to know. Then I will need to pay extra attention to Buffer Overflows and Pivoting, that's my weak spot.

[@rosehacksyoutube]

@@peterhelland5154 Pivoting gave me the most trouble, and I had a pretty good understanding of it going into the exam. So I would focus most on that area. For buffer overflow, doing the TryHackMe rooms will be enough. Take notes on them and then refer to notes on the exam.

[@peterhelland5154]

@@rosehacksyoutube Sweet, thanks! You earned yourself a subscribe ;) Keep it up buddy!

[@amyyannet359]

Awesome review! Thanks for sharing this information.

[@rosehacksyoutube]

Glad it was helpful!

[@rosehacksyoutube]

Thanks for the comment!