After this course you can carry out authorised penetration tests in networked environments on your own: from planning and reconnaissance through web, Active Directory and binaries to a report the client can work with. You will use AI tools deliberately and check what they produce. The course suits you if you already have practical pen testing experience or a CEH grounding and want to take on a long practical exam.
What you’ll take away.
- Plan and scope authorised pen tests and prepare the contractual groundwork
- Test web applications, APIs and perimeters in a targeted way
- Attack Windows and Active Directory environments in a lab and escalate privileges
- Examine binaries and IoT devices for vulnerabilities
- Use AI tools critically and write reliable reports
Your training in detail
- Who is it for?
- Experienced pen testers, red team members and security professionals who want to carry out demanding tests independently.
- Prerequisites
- According to EC-Council, at least two years of information security experience, or CEH or equivalent knowledge. The course is not suitable for beginners.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Planning, scoping and ethics
OSINT, reconnaissance and social engineering
Web and API testing
Networks, perimeters and evasion
Windows, Active Directory, Linux privilege escalation and pivoting
Binary analysis, reverse engineering and IoT
Reporting and exam strategy
In an isolated lab you test a multi-stage environment through to domain compromise and write a report with a risk assessment.
Exams, licences & credentials
This course prepares you for the practical EC-Council CPENT exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by EC-Council, not NextNowa. This is not an official EC-Council course. EC-Council sets the exam eligibility rules, so check your route with EC-Council before you book.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
What is the CPENT exam like?
It is fully practical and proctored, taken either as two 12-hour sessions or one 24-hour session. The report follows within seven days.
Do I need CEH first?
Not necessarily. EC-Council also accepts two years of information security experience or equivalent knowledge.
Does Certified Penetration Testing Professional (CPENT AI): hands-on pen testing include a certificate?
This course prepares you for the practical EC-Council CPENT exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by EC-Council, not NextNowa. This is not an official EC-Council course. EC-Council sets the exam eligibility rules, so check your route with EC-Council before you book.