🗡️ Pen Testing Certification · 2025

GIAC Penetration Tester Certification (GPEN)

Execute structured, real-world penetration tests against enterprise infrastructure. GPEN validates the skills to conduct full-scope penetration tests — from planning and reconnaissance through exploitation, privilege escalation, domain persistence, and reporting — including advanced techniques against Azure AD, Kerberos, Active Directory, and C2 frameworks used by professional red teams.

Pen Testing Red Team Active Directory Kerberos Attacks Azure AD Metasploit C2 Frameworks Privilege Escalation

Enroll Now

Recon, Scanning & ExploitationPlanning, discovery, vulnerability scanning, exploitation fundamentals

Password Attacks & Hash CrackingPassword formats, hash types, cracking techniques, and advanced attacks

Active Directory, Kerberos & AzureDomain escalation, persistence, Kerberos attacks, and Azure AD integration

Metasploit & C2 FrameworksMetasploit exploitation, command & control architecture, red team ops

Exam Questions

3 hrs

Duration

75%

Passing Score

GIAC

Certified

Why GPEN

The Gold Standard in Penetration Testing Certifications

GPEN is recognised globally as a premier credential for penetration testers. It validates real attack techniques — not just theory — and is valued by red teams, blue teams, and security management alike as evidence of genuine offensive security capability.

Trending

GPEN Is Widely Recognised as a Top-Tier Pen Testing Credential

GPEN is among the most respected certifications for penetration testers globally, valued by employers for validating genuine technical capability rather than theoretical knowledge.

Azure

Includes Modern Azure AD and Cloud Attack Techniques

GPEN covers Azure Active Directory integration, Azure-specific attack strategies, and cloud-hosted Active Directory environments — essential knowledge for modern enterprise pen testing.

Trending

Active Directory and Kerberos Attacks Are Core Skills

Domain escalation, persistence techniques, Kerberos-based attacks (Kerberoasting, Pass-the-Ticket, Golden Ticket), and lateral movement are central GPEN skills — directly applicable to enterprise engagements.

Dual

Valuable for Both Attackers and Defenders

Blue teams, SOC analysts, and forensic teams who understand how attacks work from the attacker's perspective are dramatically more effective defenders — GPEN provides this offensive perspective.

Course Content

Complete GPEN Curriculum

Click any module to expand and explore the topics covered in detail.

Reconnaissance, Scanning & Pen Test Planning

5 Topics

Penetration test planning — scoping, rules of engagement, legal considerations, and documentation

Reconnaissance techniques — passive and active intelligence gathering on targets

Scanning and host discovery — network mapping, OS fingerprinting, and service enumeration

Vulnerability scanning — automated tools, manual verification, and prioritising findings

Exploitation fundamentals — methodology, CVE assessment, and initial foothold establishment

Password Attacks, Hash Cracking & Credential Exploitation

5 Topics

Password attack fundamentals — online vs offline attacks, wordlists, and mutation rules

Password formats and hash types — identifying and categorising credential material from compromised systems

Attacking password hashes — tools, techniques, and GPU-accelerated cracking workflows

Advanced password attacks — hybrid attacks, rainbow tables, and credential stuffing techniques

Pass-the-Hash, Pass-the-Ticket, and other credential-based lateral movement techniques

Active Directory, Domain Escalation & Persistence

5 Topics

Active Directory architecture — enumerating users, groups, GPOs, ACLs, and trust relationships

Domain escalation — techniques for escalating from user to domain administrator

Domain persistence — Golden Ticket, Silver Ticket, DSRM abuse, and other persistence mechanisms

Kerberos attacks — Kerberoasting, AS-REP Roasting, Pass-the-Ticket, and Overpass-the-Hash

Escalation and exploitation across Windows environments — UAC bypass, token impersonation, and LSASS attacks

Azure AD, C2, Metasploit & Reporting

5 Topics

Azure Active Directory overview — tenant architecture, authentication flows, and identity attack surfaces

Azure AD integration with on-premise AD — hybrid environments and attack paths across both

Azure application-specific attack strategies — service principals, OAuth, and managed identity abuse

Metasploit framework — exploitation, payload generation, post-exploitation modules, and pivoting

Command and control (C2) frameworks — architecture, staging, beaconing, and detection evasion fundamentals

FAQs

Frequently Asked Questions

What is the GIAC Penetration Tester (GPEN) certification?

GPEN confirms that practitioners have the skills to conduct penetration tests according to best practices and a thorough methodology. GPEN-certified professionals are able to conduct full-scope penetration tests — including planning, reconnaissance, scanning, exploitation, privilege escalation, Active Directory and Kerberos attacks, Azure AD attacks, C2 usage, and reporting.

What are the GPEN exam requirements?

The GPEN exam consists of 82 questions, is web-based and proctored, has a 3-hour time limit, and requires a minimum passing score of 75%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

What topics does GPEN cover?

GPEN covers advanced password attacks, attacking password hashes, Azure application attack strategies, Azure overview and Active Directory integration, command and control (C2) frameworks, domain escalation and persistence, escalation and exploitation techniques, exploitation fundamentals, Kerberos attacks, Metasploit, password attacks, password formats and hash types, pen test planning, reconnaissance, scanning and host discovery, and vulnerability scanning.

Who should take GPEN?

GPEN is designed for security personnel conducting penetration tests, professional pen testers, ethical hackers, red team operators, blue team members who need to understand offensive techniques, and security defenders, auditors, and forensic analysts who need to understand attacker methodology.

How does GPEN compare to CEH or OSCP?

GPEN aligns more closely with OSCP in technical depth — it validates hands-on attack techniques rather than conceptual knowledge. GPEN comes from GIAC/SANS, which is known for rigorous technical curriculum. Unlike OSCP, GPEN is proctored exam-based rather than a practical challenge, but the curriculum is comprehensive and includes modern attack surfaces like Azure AD.

Does GPEN cover cloud and Azure Active Directory attacks?

Yes — GPEN includes dedicated coverage of Azure Active Directory architecture, on-premise AD integration, and Azure-specific attack strategies including service principal abuse, OAuth attacks, and hybrid environment attack paths, making it relevant for modern enterprise pen testing engagements.

Think Like an Attacker with GPEN

Join Zetlan Technologies' GPEN programme and master the offensive techniques that elite penetration testers use in the field. From Kerberos attacks to C2 frameworks, build the skills that red teams and blue teams both need — and earn your GIAC credential to prove it.

GIAC Penetration Tester Certification (GPEN)

The Gold Standard in Penetration Testing Certifications

GPEN Exam Details

Complete GPEN Curriculum

Red Teams, Blue Teams & Security Professionals

Frequently Asked Questions

Think Like an Attacker with GPEN