What is the Certified Penetration Testing (C|PENT) course fee at RST Forum?

The course fee is ₹50,000. There are no hidden charges — lab access and course material are included.

How long is the Certified Penetration Testing (C|PENT) course?

120 hours of live instructor-led training (lectures plus hands-on lab practice), running as weekday-evening or weekend batches.

Do I need prior experience to join?

Advanced level. Hands-on experience with EC-Council technologies — or an associate-level certification in this track — is strongly recommended before you join.

Is the training classroom or online?

Both. Classroom batches run at our Mumbai campus, and the same batch streams live for online students across India. Both get identical lab access and the same instructor.

Are the labs hands-on?

Yes — the course includes 74 hands-on labs, practised on real equipment with 24/7 remote lab access through Skillopia, our own lab platform, for practice between classes.

Which certification does this course prepare me for?

Certified Penetration Testing (C|PENT). The curriculum follows the official exam blueprint and the batch ends with structured exam preparation.

Can I attend a demo session before enrolling?

Yes. Sit through a live class with the instructor before you decide - call +91 91672 24466 or send an enquiry and we will schedule it.

Cyber Security

Certified Penetration Testing (C|PENT)

Expertise to execute proficient penetration test focusing on offence, exploitation, evasion and defense strategies. Certified Penetration Testing (C|PENT) at RST Forum is a 120-hour instructor-led course (lectures plus hands-on lab practice) at advanced level. Classroom batches run at our Mumbai campus and the same batch streams live-online across India; the fee is ₹50,000.

This course will qualify you for the Certified Penetration Testing (C|PENT) certification.

Duration: 120 hours
Training mode: Classroom & online
Course fees: ₹50,000
Level: Advanced
Certification: Certified Penetration Testing (C|PENT)

Course details verified 11 Oct 2026

Please note that the course fees exclude the certification cost.

Overview

Who should attend

This 120hrs (Lectures + hands-on Lab) training is for anyone seeking the C|PENT certification, which is where our Penetration Testers gain real-world skills, it is designed to provide challenges across every level of the attack spectrum. Additionally, the range contains multiple layers of network segmentation, and once access is gained in one segment, the latest pivoting techniques are required to reach the next segment. Many of the challenges will require outside-the-box thinking and customization of scripts and exploits to get into the innermost segments of the network. The key to being a highly skilled Penetration Tester is to go up against various targets that are configured in a variety

Outcomes

Skills you'll gain

Penetration Testing Scoping and Engagement
Open-Source Intelligence (OSINT)
Social Engineering Penetration Testing
Network Penetration Testing – External
Network Penetration Testing – Internal
Web Application Penetration Testing
Wireless Penetration Testing
IoT Penetration Testing
OT and SCADA Penetration Testing
Cloud Penetration Testing

Objectives

What you'll be able to do

The course objectives, as the vendor's own blueprint states them.

The course is presented through an enterprise network environment that must be attacked, exploited, evaded, and defended.
The C|PENT course assesses a Penetration Tester’s skills across a broad spectrum of “network zones”.
What makes the C|PENT different is the requirement to be provided a variety of different scopes of work so that the candidate can “think on their feet.”
The result of this is that there are different zones representing different types of testing.
Anyone attempting the test will have to perform their assessment against these different zones.
100% mapped with the NICE framework.
Maps to the job role of a Penetration Tester and security analyst, based on major job portals. > 100% methodology-based Penetration Testing program.
Provides strong reporting writing guidance.
Blended with both manual and automated Penetration Testing approach.
Gives a real-world experience through an Advanced Penetration Testing Range.
Designed based on the most common Penetration Testing services offered by the best service providers in the market.
Offers standard templates that can help during a Penetration test.

Included

What you get

Curriculum based on course outlines defined by EC-Council’s (C|PENT).
This Instructor-led classroom course is designed with an aim to build theoretical knowledge supplemented by ample hands-on lab exercises.
Facility of Lab on cloud available.
Courseware includes reference material to maximize learning.
Assignments and tests to ensure concept absorption.
Repeating of lectures allowed (On approval basis)
Candidates can attend lectures online.

After the course

Placements & outcomes

Placement assistance is included: CV preparation, interview drills with real scenario questions, and referrals through our alumni network of 1 million+ engineers trained since 1997.

1 modules

Full syllabus

Every module below is taught live and practised hands-on — nothing here is a slide-only topic.

Certified Penetration Testing (C|PENT) — Course Topics

Module 1 - Introduction to Penetration Testing and Methodologies

Penetration Testing.
Penetration Testing Security Delivery Models.
ROI of Penetration Testing.
Types of Penetration Assessment.
Strategies if Penetration Testing.
Selection of Appropriate Testing Types.
Different types of Penetration Testing.
Common Areas of Penetration Testing.
Penetration Testing Process.
Penetration Testing Phases.
Penetration Testing Methodologies.
LPT Methodology.
Qualities of a Licensed Penetration Tester.
Characteristics of a Good Penetration Test.
Ethics of a Penetration Tester.
Qualification, Experience, Certifications and skills required for a Penetration Tester.
Risk Associated with Penetration Testing.

Module 2 - Penetration Testing Scoping and Engagement

Penetration Testing: Pre-engagement Activities.
Initiation of a Pen Testing Engagement Process.
Proposal Submission.
Determine the project schedule.
Staffing Requirements.
Rules of Engagement.
Estimating the Timeline for Engagement.
Penetration Testing Schedule.
Identifying the reporting time scale.
Deciding a time of day for test.
ROE document.
Penetration Testing contract.
Penetration Testing “Rules of Behaviour”.
Confidentiality and Nondisclosure Agreement Clauses.
Identifying the Security tools required for Penetration Testing.
Preparing the test plan.
Penetration Testing Hardware/Software requirement.
Gathering Information on client organizations history and background.
Identifying the local equipment required for the Pen Test.
Mission briefing.
Scope Creeping.

Module 3 - Open-Source Intelligence (OSINT) and Attack Surface Mapping

OSINT through the WWW.
OSINT through Website Analysis.
OSINT through DNS Interrogation.
Whois Lookups.
Reverse Lookups.
DNS Zone transfer.
Traceroute Analysis.
Automating the OSINT Process using tools/frameworks/scripts.

Module 4 - Social Engineering Penetration Testing

Social Engineering Penetration Testing.
Social Engineering Penetration Testing modes.
Social Engineering Penetration Testing process.
Social Engineering using Email, Phishing, Spear Phishing, Whaling, Vishing, Smishing.
Social Engineering using Physical attack vector.
Piggybacking/Tailgating.
Eavesdropping.
Dumpster diving.
Reverse Social Engineering.
Social Engineering Countermeasures and Recommendations.

Module 5 - Web Application Penetration Testing

Web Application Security frame.
Security frame vs. Vulnerabilities vs. Attacks.
Website footprinting.
Web enumeration.
Discover Web Application Default Content.
Discover Web Application Hidden Content.
Conduct Web vulnerability scanning.
Test for SQL injection vulnerabilities.
Test for XSS vulnerabilities.
Test for Parameter tampering.
Test for Weak cryptography vulnerabilities.
Test for Security misconfiguration vulnerabilities.
Test for Client side attacks.
Test for Broken authentication and authorization vulnerabilities.
Test for Broken Session management vulnerabilities.
Test for Web services security.
Test for Business Logic Flaws.
Test for Web server vulnerabilities.
Test for Thick Clients vulnerabilities.

Module 6 - API and Java Web Token Penetration Testing

Module 7 - Perimeter Defense Evasion Techniques

Module 8 - Windows Exploitation and Privilege Escalation

Module 9 - Active Directory Penetration Testing

Module 10 - Linux Exploitation and Privilege Escalation

Module 11 - Reverse Engineering, Fuzzing, and Binary Exploitation

Module 12 - Lateral Movement and Pivoting

Module 13 - IoT Penetration Testing

Popular IoT Hacks.
IoT Challenges.
IoT Penetration Testing.
Abstract IoT Testing Methodology.
Attack Surface Mapping.
IoT Architecture.
Typical IoT Vulnerabilities.
Steps to Analyzing the IoT Hardware.
Firmware Attacks.
Attack Surface Map.
Sample Architecture Diagram.
Sample Firmware Analysis Process.
Binwalk to Extract the File System.
Exploring the File System.
Firmware Emulation.

Module 14 - Report Writing and Post-Testing Actions

Goal of the Penetration Testing Report.
Penetration Testing Deliverables.
Report Formats.
Types of Pen Test Reports.
Characteristics of a Good Pen Testing Report.
Phases of Report Development.
Sample Pen Testing Report Format.
Report Components.
Penetration Testing Report Analysis.
Sections of the Penetration Testing Report.
Pen Test Team Meeting.
Research Analysis.
Prioritize Recommendations.
Delivering Penetration Testing Report.
Letter of Attestation.
Cleanup and Restoration.
Report Retention.
Sign-off Document.
Post-Testing Actions for Organizations.
Develop an Action Plan.
Develop and Implement Data Backup Plan.
Create a Process for Minimizing Misconfiguration Chances.
Updates and Patches.
Capture Lessons Learned and Best Practices.
Create Security Policies.
Conduct Training.

74 labs

Hands-on labs

Structured labs on real equipment, with 24/7 lab-on-cloud access through Skillopia - our own lab platform.

Hands-on labs

Perform advanced Windows attacks.

Understanding IoT vulnerabilities and attacking IoT systems.

Perform firmware attack and emulate firmware to perform attack on IoT devices.

Use BinWalk to extract the file system and perform attack on IoT devices.

Writing exploits using advanced binary exploitation.

Writing sample program, x86 C program, shell code, ASLR, to create exploits.

Perform attack using ROP.

Perform wireless penetration testing.

Use wireless honeypot to discover vulnerable wireless client.

Perform wireless DDoS attack.

Perform ARP poisoning attack.

Learn to crack WPA/WPA2 keys.

Perform spoof attack to learn MAC address.

Perform RFID cloning/spoofing and replay attack.

Perform wireless MITM attack.

Perform data modification, data corruption attack.

Perform eavesdropping.

Conduct web vulnerability scanning.

Perform SQL injection vulnerabilities attack.

Perform XSS vulnerability attack.

Perform broken authentication and authorization vulnerability attack.

Perform XSS vulnerability attack.

Perform parameter tampering attack.

Exploit weak cryptography.

Exploit the broken Session management vulnerability.

Exploit web server and thick client vulnerability.

Perform Fingerprinting of the OS.

Perform external network penetration testing.

Perform internal network penetration testing.

Perform port scanning.

Perform fingerprinting of the services.

Perform external vulnerability assessment.

Perform network scanning.

Perform scanning analysis.

Perform SMB OS discovery.

Perform manual banner grabbing.

Perform displaying services with Metasploit.

Perform mapping of the internal network enumeration.

Perform network vulnerability scanning.

Perform host vulnerability scanner.

Create vulnerability assessment reports.

Perform Linux exploitation.

Attempt replay attacks.

Attempt ARP poisoning.

Attempt MAC flooding.

Conduct a man-in-the-middle attack.

Attempt DNS poisoning.

Perform pivoting.

Find information about the firewall.

Enumerate firewall access control list using nmap.

Perform firewall scanning for vulnerabilities.

Bypass firewall using various techniques and tools.

Test common techniques used to evade ids system.

Test for resource exhaustion.

Identify the router operating system and its version.

Identify the protocols running.

Perform IP spoof attack.

Perform router penetration testing using secure Cisco auditor (SCA).

Perform VLAN hopping attack.

Perform MAC table flooding attack.

Perform ARP attack.

Perform OSINT through the WWW, website analysis, DNS interrogation.

Perform Whois lookups, reverse lookups, DNS zone transfer and traceroute analysis.

Perform social network attack - email, phishing, spear phishing, whaling, vishing, smishing.

Perform piggybacking/tailgating, eavesdropping, dumpster diving.

Perform ICS and SCADA PenTesting.

Perform attack monitoring.

Use OT testing tools, BACnet, SCADA fuzzing tool.

Use danger of port scanning.

Perform cloud reconnaissance.

Perform a detailed vulnerability assessment.

Perform attempts to identify S3 Buckets.

Understand azure specific penetration testing.

Understand google cloud platform specific penetration testing.

Reserve your seat

Watch a real class. Meet your instructor. Then decide.

Hold a place on the next batch and sit in on the opening session. See the teaching, the racks and the labs exactly as students do, then enrol if it's right for you.

Reserve my seat Chat on WhatsApp

1 million+

engineers trained

1997

training since

24/7

Skillopia lab access

Keep exploring

View the full Cyber Security track

Fee

₹50,000

Reserve a seat