Preparing for the eJPT: a first practical penetration testing exam

Format

The eJPT from INE is an entry-level practical exam taken in a browser-based lab over an extended window, answering questions whose answers you find by working through the environment. It is open book. Confirm the current duration and question count on INE’s site, since the format has been revised over time.

Skills it checks

Expect to discover hosts on a network, enumerate services and versions, find weak credentials and misconfigurations, assess basic web application issues, use known exploits against outdated services in the lab, and reach a second network through a compromised host. The emphasis is methodology and thoroughness rather than advanced techniques.

• Host discovery and port scanning
• Service and version enumeration
• Web application basics
• Password attacks against lab services
• Using known public exploits in the lab
• Routing to a second network through a foothold

Lab: a methodology run on a training box

On a legal training platform, choose an easy retired machine and work it with a written checklist: discovery, full TCP scan, service versions, web enumeration, credential checks, exploitation, local enumeration, and a note on what a second network would require. Time each phase. Repeat on three more boxes and update the checklist each time.

phase | done | time | notes
discovery | x | 5m | 1 host
full TCP scan | x | 12m | 22, 80, 3306
versions | x | 4m | Apache 2.4, MySQL 5.x
web enum | x | 20m | /admin login, default credentials worked (lab)
foothold and local enum | x | 25m | config file with database credentials
pivot notes | x | 5m | second interface 172.16.5.0/24

After eJPT

The eJPT builds habits that carry into PNPT and OSCP: complete enumeration, clean notes, and a repeatable checklist. Keep every practice note; it becomes your reference for the harder exams.