Your cart is empty.
Keep shopping
GPEN Exam Prep: Complete Guide To GIAC Penetration Tester
331 students
GPEN Exam Prep: Complete Guide To GIAC Penetration Tester
Penetration testing mastery: Active Directory, Azure, Kerberos, ADCS, Metasploit & 2 full mock exams.
Created byAdrian Găitan, Evaluris Solutions, Reju Kole
Last updated 4/2026
English
What you'll learn
- Pass the GIAC GPEN exam by fully mastering all 2026 official exam objectives across all three scored domains
- Plan, scope and execute professional penetration tests from pre-engagement through reporting using industry best practices
- Conduct comprehensive reconnaissance using OSINT, DNS enumeration, Nmap, NSE and vulnerability scanning techniques
- Attack Active Directory environments using Kerberoasting, AS-REP roasting, BloodHound, DCSync and Kerberos ticket forgery
- Exploit Azure and Entra ID through password spraying, token theft, RBAC privilege escalation and hybrid identity attacks
- Escalate privileges on Windows and Linux using service misconfigurations, token impersonation, SUID abuse and potato attacks
- Exploit Active Directory Certificate Services vulnerabilities ESC1 through ESC8 using Certipy for domain privilege escalation
- Validate your exam readiness with 2 complete 82-question mock exams built to the exact format and difficulty of the real GPEN
Explore related topics
Course content
12 sections • 65 lectures • 28h 25m total length
Requirements
- Basic understanding of TCP/IP networking and how core protocols like DNS, SMB, HTTP and LDAP function
- Familiarity with the Windows and Linux command lines at a beginner to intermediate level
- No prior penetration testing certification is required — this course covers everything from methodology through advanced techniques
Description
The GIAC Penetration Tester (GPEN) certification is one of the most respected offensive security credentials in the world. Held by elite penetration testers, red teamers and security professionals across government, defense and enterprise, it validates your ability to conduct real-world penetration tests using industry best-practice techniques and methodologies. With over 41,000 active job postings referencing GPEN and average salaries exceeding $117,000 per year, this certification directly impacts your career trajectory.
The problem is that there is no serious instructor-led GPEN preparation course on the market. Until now.
This course is the most comprehensive GPEN exam preparation resource available anywhere online. Built around the official 2026 GIAC exam objectives and fully aligned to the SEC560 Enterprise Penetration Testing curriculum, it delivers over 31 hours of structured, in-depth instruction across every topic you will be tested on — nothing is skipped, nothing is surface-level.
The course covers all three official GPEN exam domains in full depth.
Domain 1 takes you through penetration testing methodology, legal frameworks, scoping, rules of engagement, passive and active reconnaissance, OSINT, DNS attacks, network scanning with Nmap, NSE scripting, vulnerability scanning and service enumeration.
Domain 2 covers initial access and exploitation, Metasploit and Meterpreter, msfvenom payload generation, password attacks with Hydra, Hashcat and John the Ripper, LLMNR poisoning with Responder, NTLM relay attacks with ntlmrelayx, IPv6 DNS takeover with mitm6, post-exploitation, Windows and Linux privilege escalation, credential harvesting with Mimikatz, pivoting and tunneling, and data exfiltration.
Domain 3 dives deep into Active Directory attacks including BloodHound and SharpHound, Kerberoasting, AS-REP roasting, Pass-the-Hash, Pass-the-Ticket, Golden Ticket and Silver Ticket forgery, DCSync, NTDS.dit extraction, Active Directory Certificate Services exploitation covering ESC1 through ESC8 with Certipy, Azure and Entra ID password spraying, token abuse, RBAC privilege escalation, managed identity attacks, hybrid identity exploitation, command and control frameworks including Sliver and Empire, persistence mechanisms, AMSI bypass, EDR evasion and professional penetration test reporting.
The course closes with two full-length mock examinations built to the exact format, difficulty and scenario style of the real GPEN exam. These are not simple quiz banks — each mock is a complete 82-question exam with detailed explanations for every answer, designed to simulate the pressure and question logic of the actual GIAC testing environment so you walk in on exam day with full confidence.
Who this course is for:
- Security professionals and IT practitioners actively preparing to sit the GIAC GPEN certification exam
- Penetration testers and ethical hackers looking to validate their skills with a globally recognized offensive security credential
- Red team members who want structured, exam-aligned coverage of enterprise attack techniques including Active Directory and Azure
- Network administrators and defenders who want to deeply understand the attacker methodology they are defending against
- Career changers with a networking or systems background who want to move into offensive cybersecurity roles