eJPT (Junior Penetration Tester) Training

Module 1

Networking & TCP/IP for Pentesters

OSI and TCP/IP model, IP addressing, subnets, routing basics, ports and protocols, TCP vs UDP. How these concepts show up in scans, firewalls and VPNs in a typical pentest lab environment.

Module 2

Linux & Windows Essentials for Offensive Work

Linux shell basics, file system, permissions, networking commands, process management, simple bash usage. Windows basics, common paths, services, and PowerShell intro. Enough OS knowledge to be comfortable in any eJPT-style VM.

Module 3

Information Gathering & Enumeration

Active and passive reconnaissance: host discovery, port scanning, version detection, service enumeration. Nmap in detail (scan flags, scripts, timing), banner grabbing, directory busting, and identifying attack surface.

Module 4

Vulnerability Identification & Exploit Research

Mapping services to potential vulnerabilities. Using searchsploit and public exploit databases. Understanding exploit modules (Metasploit), exploit reliability, version-specific issues, and lab-safe testing.

Module 5

Web Application Basics for eJPT

HTTP/S basics, cookies, sessions, parameters, GET vs POST. Common issues: identification of simple SQL injection, XSS, auth bypass patterns, file uploads, LFI/RFI style bugs. Burp Suite basics and practical use for lab-style web exploitation.

Module 6

Exploitation & Shells

Remote code execution in lab targets, reverse/bind shells, stabilizing shells, working with Meterpreter (if used), and manual exploitation patterns. Understanding what “getting a foothold” really means in a test.

Module 7

Privilege Escalation Fundamentals

Local enumeration on Linux and Windows, misconfigurations, weak services, credentials in files, and simple privilege escalation techniques commonly tested in beginner labs. Using checklists and scripts responsibly.

Module 8

Password Attacks & Credential Reuse

Brute force and dictionary attacks in a lab setting (Hydra, Medusa, etc.), password lists, understanding account lockout risks, and safely simulating attacks in training environments only. Basics of credential reuse and pivoting using found credentials.

Module 9

Pivoting, Tunneling & Lateral Movement

Concept of network segmentation and internal subnets in labs. Simple pivoting via compromised hosts, SSH tunnels / SOCKS, proxychains basics, and how eJPT-style labs might require moving beyond the first target.

Module 10

Reporting & Documentation

Turning raw notes into a simple, clear report: summary, methodology, findings, impact and recommendations. How to explain technical issues to non-technical stakeholders and show value as a junior tester.

Who can join

• Basic understanding of computers and networking helps.
• No prior pentesting experience required.
• Willingness to work inside Linux and command line.

What you need

• PC / laptop capable of running VMs or VPN-based labs.
• Stable internet connection.
• Virtualization software (VirtualBox / VMware) if required by labs.

We’ll guide you on lab setup and safe usage so your practice stays isolated and legal.