The Ultimate eCPPT Certification Review + Exam Advice

[@ghsinfosec]

Awesome man, I got eJPT a little while back and I'm about halfway through the eCPPT course now. This was a nice review, thanks for sharing!

[@tahsinkaraca1710]

I found this channel by coincidence. I am so grateful for that. Great content! Thanks for sharing your experience.

[@theone4808]

Great video, nice tips. Only thing I disagree with is the Powershell bit. If you know how to use it, it is a really powerful tool.

[@jalajpratapsingh1625]

really inspired by you man, thanks

[@Tchatarero36]

thank you so much

[@cr0www]

Great stuff, man! Keep it up :D

[@GrahamHelton]

Appreciate it.

[@omereltayeb5834]

Amazing review :)

[@ip9153]

congrats! just wondering what pre-req is required for someone has no background about pen test to start this professional pen test certification? thanks heaps

[@tradertrader2649]

damn the BoF really pull my hair. I am stuck on that machine

[@Ali-oc3tg]

Great video and thanks for the advices! I have a degree in computer science engineering (that i just got 3 months ago) and I am now a sys engineer (for the past 3 months), I want to become a pentester but I have 0 experience in pentesting, do you think I should start with the ejpt certification or go directly to ecppt? Thanks

[@GrahamHelton]

I would start with the eJPT.

[@nmmorette]

I'm going to PNPT next month, but I've started my search for the next cert. Do you think that ecppt it's a good step after PNPT? (skipping the eJPT)

[@ncwb1996]

How did you do your report ? I am currently using obsidian too and am curious if there are any ways to do the report and generate it from obsidian

[@GrahamHelton]

You can export to PDF from obsidian. I wrote my report in word because at the time I wasn't super comfortable with making it look good in mark down. There are some premade markdown templates out there for pentest reports or you can use some of the cool features obsidian offers via the community plugins.

[@0x0d4y]

Are you a new instructor from TCM Security?? The Phishing Course?

[@GrahamHelton]

Yep, that's me!

[@overyourbed666]

Currently studying for this bad boy and I'm nervous bc I'm still stumbling in the labs and I'm not really 100% sure on how to make a report (I know what goes in it, it's the how and yes, I'll 'try harder' and find out how *wink wink*) do you have any advice?

[@Urbancorax2]

thank you for the video! I am in the middle of the study. So, you had to install Windows 7, immunity+vulnerable app all together and develop the exploit?? Was the vulnerable app the same as in the lab? How would they expect you to bof an app without debugger as stuff? And how did you know which machine to bof?

[@GrahamHelton]

Yes, you need to install immunity + the app. I actually didn't do the BOF lab, I just follow thecybermentor's buffer overflow tutorial. You will be able to figure out what machine is the BoF just by context clues.

[@hawaiihawaii1112]

Small boy with this qualities.

[@scott-yd3dy]

I just went through the eJPT modules and black boxes, and I feel confident that I would pass the exam, but I'm unsure whether I should spend the $200 to get it, or just spend that $200 for 4 months of INE training while going to school. Any thoughts/recommendations? Especially regarding whether it would look good on a resume to have the two certs or if I should just study and get the eCCPT.

[@GrahamHelton]

I think the eJPT is a great first step. I wouldn't go for eCPPT without getting eJPT if I didn't have any pentesting experience first. The eJPT will give you a good taste of the pentesting world.

[@scott-yd3dy]

@@GrahamHelton Thank you for your response, I took your advice and passed it. There were definitely a couple things I learned when taking it, so I think it was worth while. Now I am ready to start learning for a new cert again. :)

[@iSgapetti]

19:49 LMAO 2 years later and eLearn did fuck all to their brand recognition. They moved to a more consumer unfriendly model after being acquired by INE. Such a shame.

[@joepereira8690]

Hi Graham, thanks for the video. Are you saying that once you passed the eJPT and the eCPPT exams you were able to find a pen-testing job?

[@GrahamHelton]

I actually got lucky and got hired while I was still going for the eCPPT, but I think that is the exception rather than the rule. Certs are just one piece of the puzzle. I would recommend doing other projects along side your certs.

[@lIlIllll1]

Do we need a Windows 7 VM or can it be Windows 10?

[@GrahamHelton]

I would use a windows 7 VM just to be safe but I'm not 100% sure.

[@lIlIllll1]

@@GrahamHelton thanks for your response man!

[@lIlIllll1]

@@GrahamHelton Do you have a link on where I can get a free Windows 7 VM?

[@Auditing102]

Thanks Graham Helton, I'll be sure to include your memories in the collective knowledge of the human race control brain.