🔥 Trending Certification · 2025

GIAC Experienced Penetration Tester (GX-PT)

Demonstrate seasoned, hands-on red team and purple team skills. GX-PT-certified professionals validate their ability to map networks, identify vulnerabilities, exploit hosts, move laterally across enterprise environments, and conduct comprehensive offensive operations under realistic testing conditions.

Red Team Operations Penetration Testing Active Directory Attacks Privilege Escalation C2 Frameworks Purple Team Career Defining

Enroll Now

Reconnaissance & ScanningOSINT, infrastructure mapping & vulnerability discovery

Active Directory AttacksDomain enumeration & privilege escalation

Lateral MovementHost pivoting & network traversal techniques

Command & Control (C2)C2 communication & detection evasion

4 hrs

Duration

70%

Passing Score

Open Book

Open Notes

GIAC

Certified

Why It's Trending

Experienced Red Teamers Are the Rarest Talent in Security

Organisations increasingly rely on red and purple team engagements to stress-test their defences. GX-PT validates the hands-on, experience-driven skills that set senior penetration testers apart from those who only rely on automated tooling.

Trending

68%

Of Organisations Now Run Annual Red Team Exercises

Board-level demand for adversary simulation is rising — experienced penetration testers are essential to these engagements.

9,200+

Open Senior Red Team & Pen Testing Roles

Experienced red team operators and senior penetration testers remain among the most sought-after security professionals.

Trending

Elite Experience Cert

GIAC's Experience-Based Certification

GX-PT goes beyond knowledge — it validates hands-on experience in realistic, time-restricted testing conditions.

+38%

Salary Premium for Senior Pen Testers

Practitioners with proven red team and AD attack experience command the highest offensive security salaries.

Course Content

Complete GX-PT Curriculum

Click any module to expand and explore the topics covered in detail.

Reconnaissance & Network Scanning

5 Topics

Gathering sensitive and non-sensitive information via OSINT and metadata

Infrastructure documentation and tool-based reconnaissance techniques

Scanning networks for hosts, software versions, and vulnerabilities

Identifying infrastructure weaknesses for use in offensive operations

Open-source intelligence gathering for penetration test preparation

Password Attacks

5 Topics

Password guessing and cracking tools to bypass authentication

Identifying policy non-compliance through credential analysis

Credential stuffing, spraying, and hash-based attack techniques

Cracking NTLM, NTLMv2, and Kerberos ticket hashes

Post-exploitation credential harvesting from memory and disk

Vulnerability Exploitation

5 Topics

Exploiting vulnerabilities to gain access to target systems

Using tools to exploit network-accessible vulnerabilities

Chaining multiple vulnerabilities for deeper system access

Exploiting misconfigurations in enterprise services

Living-off-the-land techniques using native OS tools

Lateral Movement & Privilege Escalation

5 Topics

Accessing hosts through lateral movement across a network

Escalating privileges to gain access to otherwise restricted areas

Pass-the-hash, pass-the-ticket, and token impersonation techniques

Pivoting through network segments using compromised hosts

Avoiding detection during lateral movement operations

Active Directory & Domain Attacks

5 Topics

Applying penetration testing techniques to Microsoft Active Directory

Kerberoasting, AS-REP roasting, and Kerberos delegation abuse

DCSync, Golden Ticket, and Silver Ticket attack techniques

Enumerating AD objects, ACLs, and trust relationships

Compromising domain controllers and achieving full domain takeover

Command & Control (C2) & Linux Pen Testing

5 Topics

Communicating with a C2 framework and evading detection

Setting up and managing C2 infrastructure during engagements

Using the Linux OS for penetration testing concepts and tools

Linux-based privilege escalation and post-exploitation techniques

Maintaining persistent access while avoiding endpoint detection

Who Is This For

Designed for Seasoned Penetration Testing Professionals

GX-PT is purpose-built for experienced practitioners who want to validate their real-world offensive skills — particularly those with hands-on red team and enterprise penetration testing experience.

Security Professionals with Complex Challenge Experience

GPEN Certification Holders

Red Team Operators

Offensive Operations Professionals

Purple Team Practitioners

Enterprise Pen Testers

FAQs

Frequently Asked Questions

What is the GIAC Experienced Penetration Tester (GX-PT) certification?

GX-PT demonstrates that a candidate has seasoned, hands-on red team and purple team skills. It validates the ability to map networks, identify vulnerabilities, exploit hosts, escalate privileges, move laterally, attack Active Directory environments, and operate C2 infrastructure — all in a realistic, time-restricted testing environment.

What are the GX-PT exam requirements?

The GX-PT exam is web-based, proctored, open book and open notes, has a 4-hour time limit, and requires a minimum passing score of 70%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

How does GX-PT differ from GPEN?

GPEN covers the fundamentals of penetration testing methodology. GX-PT is designed for practitioners who already have GPEN or equivalent experience and want to validate their advanced, real-world offensive skills. GX-PT is the next step for those continuing their journey toward expert-level offensive operations.

Who should pursue the GX-PT certification?

GX-PT is ideal for security professionals who excel at complex challenges, GPEN holders who have gained additional penetration testing experience, red team operators, and offensive operations professionals who want to validate and advance their expertise.

Does GX-PT cover Active Directory attacks?

Yes — Active Directory penetration testing is a core GX-PT domain. You learn to enumerate AD environments, exploit Kerberos delegation and ticket attacks, perform DCSync and Golden Ticket attacks, and achieve full domain compromise through realistic attack chains.

Is GX-PT recognised for senior offensive security roles?

Yes — GX-PT is valued by organisations that run mature red team programmes and require proof of hands-on experience beyond knowledge-based certifications. It is increasingly listed as a preferred qualification for senior penetration tester, red team lead, and offensive security engineer roles.

Prove Your Penetration Testing Experience with GX-PT

Join Zetlan Technologies' GX-PT programme and validate your hands-on red team skills — from reconnaissance and Active Directory attacks to C2 operations and lateral movement. Earn your advanced GIAC certification and stand out as an experienced offensive security professional.

GIAC Experienced Penetration Tester (GX-PT)

Experienced Red Teamers Are the Rarest Talent in Security

GX-PT Exam Details

Complete GX-PT Curriculum

Designed for Seasoned Penetration Testing Professionals

Frequently Asked Questions

Prove Your Penetration Testing Experience with GX-PT