Skip to content
Pwnversity

PNPT

The PNPT (Practical Network Penetration Tester) by TCM Security is a practical certification that stands out for simulating a REAL end-to-end pentest: OSINT, Active Directory attack, pivoting, and —most distinctively— a professional report and a presentation/defense before evaluators.

What makes it different

Section titled “What makes it different”
- an exam that SIMULATES a full real ENGAGEMENT (5 days + report)
- strong in OSINT, Active Directory, and pivoting (very reality-oriented)
- includes DELIVERING a professional REPORT AND defending it on a call ("debrief")
- no gimmicks: it reflects what a real pentest is like

What it covers

Section titled “What it covers”
- initial OSINT and social engineering (see se-pretexting, recon)
- external pentest and initial access
- Active Directory end to end (see the Windows & AD area)
- pivoting and post-exploitation; escalation (linux-privesc/win-privesc)
- professional reporting (the report SCORES and is defended)

The exam

Section titled “The exam”
- 5 days to compromise the environment + 2 days for the report
- deliver a professional pentest REPORT
- DEFEND it in a 15-min video call with an evaluator (unique among certs)
- very realistic: a full process, not isolated challenges

How to prepare

Section titled “How to prepare”
- the associated TCM course (PEH - Practical Ethical Hacking) included
- practice AD (ad-*), OSINT (se-pretexting), pivoting, and reporting (bb-reporte)
- the oral defense: be able to EXPLAIN what you did, not just have done it

Professional value

Section titled “Professional value”
- highly valued for its REALISM and for including report + defense (real consultant skills)
- excellent value for money; a good alternative/complement to the OSCP
- demonstrates a pentester's FULL cycle, communication included

Blue Team / career

Section titled “Blue Team / career”
  • The PNPT stands out for realism: OSINT → AD → pivoting → report → oral defense.
  • It trains communication (defending the report), a key consultant skill other certs ignore.
  • Preparing it covers AD (ad-*), OSINT (Pretexting & target OSINT), and reporting (Writing a good report) in an integrated way.
  • Good value for money and well regarded as an alternative or complement to the OSCP.

Tips and common mistakes

Section titled “Tips and common mistakes”
  • Practice the professional report and the oral debrief: that’s what sets PNPT apart; rehearse recordings.
  • The exam is AD-heavy with initial OSINT; don’t neglect external recon.
  • Common mistake: exploiting well but delivering a poor report; the grade leans on the deliverable.

Testing checklist

Section titled “Testing checklist”

References

Section titled “References”