Resecurity® Certified Penetration Testing & Red Team Professional (RCPT)
Learn to plan, run and report authorised offensive security work.
About this course
Learn to plan, run and report authorised offensive security work. Across four and a half days you will scope engagements, set rules of engagement, map an attack surface, assess networks, web applications and APIs, and validate vulnerabilities through controlled exploitation.
Labs and attack simulations cover privilege escalation, lateral movement and adversary emulation, always with operational safety in mind. You will finish by turning technical findings into business impact and clear remediation, preparing you for the RCPT credential.
What you'll learn
- Scope authorised penetration tests and red team engagements and agree rules of engagement.
- Discover and map an attack surface across networks, hosts, web applications and identity.
- Enumerate services and prioritise vulnerabilities by technical and business risk.
- Assess web applications and APIs within an authorised scope.
- Validate vulnerabilities safely through controlled exploitation.
- Apply privilege escalation, lateral movement and adversary emulation in lab environments.
- Record evidence and translate findings into business impact.
- Write penetration test reports, executive summaries and prioritised remediation plans.
Curriculum
- Penetration testing versus red teaming
- Scoping and objectives
- Rules of engagement and authorisation
- Operational safety controls
- Passive reconnaissance
- External and internal discovery
- Mapping assets and exposure
- Identity and cloud footprints
- Network and service enumeration
- Vulnerability scanning and validation
- Risk-based prioritisation
- Avoiding false findings
- Common web vulnerability classes
- Authentication and session flaws
- API testing
- Safe testing practice
- Choosing safe exploitation paths
- Exploitation in practice
- Proving impact without harm
- Clean-up and evidence
- Windows privilege escalation
- Linux privilege escalation
- Active Directory attack paths
- Credential use and pivoting
- Threat-informed emulation plans
- Mapping to MITRE ATT&CK
- Detection-aware operations
- Working with the blue team
- Evidence and findings write-up
- Business impact and risk ratings
- Executive summaries and remediation
- Integrated capstone
Who it's for
Penetration testers, red team members, security engineers, application security staff and consultants who assess defences.
Before you start
- Solid grasp of TCP/IP, Windows and Linux, common services and web basics.
- Prior study or experience in cybersecurity or vulnerability assessment.
Prepares for
Related courses
More in Cyber Threat Intelligence & Investigations →Resecurity® Cybersecurity Professional Foundations (RCCPF)
Cyber Threat Intelligence & Investigations
View course →Resecurity® Certified Cyber Threat Intelligence Analyst (RCCTIA)
Cyber Threat Intelligence & Investigations
View course →Resecurity® Certified Blue Team Operations Professional (RCBTOP)
Cyber Threat Intelligence & Investigations
View course →Resecurity® Certified Digital Forensics & Incident Response Professional (RCDFI)
Cyber Threat Intelligence & Investigations
View course →Resecurity® Certified Financial Cyber Intelligence Analyst (RCFCIA)
Cyber Threat Intelligence & Investigations
View course →Resecurity® Certified Malware Analysis & Reverse Engineering Professional (RCMAR)
Cyber Threat Intelligence & Investigations
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.