AlteredSecurity Certified Penetration Tester Lab Objective

The Hands-On Infrastructure and Network Penetration Testing with NetExec is a training environment that helps in getting started with Penetration testing. It covers Linux based attacks, Active Directory attacks, Network Pivoting and Tunneling, AD CS abuse, Looting Windows Machines, and more. Learn to use NetExec and other tools to attack an Enterprise environment with Server 2022 and Linux machines.

Students can practice techniques like Initial Access, Port Scanning, AD enumeration, Linux and Windows Privilege Escalation, Network pivoting, Relaying, abusing file shares, bypassing Windows Defender, credentials spraying and reuse, extracting secrets, SQL Server abuse, and more!

WhatsApp Image 2026-07-07 at 1.09.10 PM.jpeg

The course is designed using the experience of tool authors and seasoned penetration testers who have worked in real world environments. The course and the lab are targeted for elementary level users who are looking to develop skills for penetration testing job roles.

What's Included

Red Team Lab, Red Team Certifications, Red Team Trainings, Azure Pentesting, Azure Security

Access to a lab environment (One/Two/Three months) with updated Server 2022 machines. Lab can be accessed using a web browser or VPN.
A ready to use Linux VM in the cloud that has all the tools.
Life time access to all the learning material (including course updates).
14+ hours of video course with English captions.
Lab manual for solving the labs.
Course slides.
Walk-through videos.
One exam attempt for the AlteredSecurity Certified Penetration Tester (ACPT) certification.
Support on email and Discord.

What will you Learn?

The course is designed based on the experience of one of the most popular penetration testing tools - NetExec. Combined with our experience of teaching penetration testers and red teamers for more than 15 years, this course teaches mindset, skills, tools and techniques to get started with penetration testing.

Get started with penetration testing. Understand the mindset, methodology and skills required to attack a modern Enterprise environment.
Learn and practice techniques and tools (NetExec and other) used for security assessments and penetration tests.
Attack a truly segmented network and use tunnels and Layer 2 VPN for network pivots.
The lab contains full patched Server 2022 machines. Whatever you learn and practice in the course will be useful in your job from day one.

Prerequisites for the course

Basic understanding of networking and infrastructure.
Ability to use command line tools.

Purchase On-Demand Lab

On Demand Lab

30 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$249

Extension

30 DAYS
LAB EXTENSION
+
ONE COMPLEMENTARY EXAM ATTEMPT

$199

On Demand Lab

60 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$379

On Demand Lab

90 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$499

Exam Reattempts and Lab Extensions are exclusively available to registered students of the course.

Reattempt

EXAM
REATTEMPT

$99

Certificate Renewal - Only For Existing ACPT Certified Student

Course access and one renewal exam attempt is free. If you want to access the lab for practice or need another renewal exam attempt, purchase that from here.

Extension

30 DAYS LAB ACCESS FOR CERT RENEWAL

$149

Reattempt

ADDITIONAL
RENEWAL EXAM

$29

Add to cart

.

Purchase includes : 30 days lab access + course material + one certification exam attempt

Terms of Purchase and Use:

You can start your lab access anytime within 90 days (180 days in case you have purchased the lab on Diwali / Black Friday sale) of purchase.
You can use your registered email address to access the lab portal enterprisesecurity.io.
One Certification Exam attempt is included in the pricing. Additional exam attempts will be $99 each.
Once connected over VPN, consider the lab to be a hostile environment and you are responsible for your computer's security.
The above lab is a shared environment and certain pre-specified machines will be off-limits.
If you want a dedicated lab just for yourself at extra cost, please use the form in the Contact tab.

Alexander Neff

Alexander is a prominent cybersecurity consultant, penetration tester, and core maintainer/developer of NetExec (often abbreviated as NXC), the popular network execution tool used in offensive security operations. His other offensive tools focus on attacking services such as the Windows Server Update Service (WSUS) or extracting credentials from WinSCP.

Since 2022 he regularly conducts penetration tests with a focus on internal infrastructure and Active Directory, while finishing his studies in the IT Security field.

Purchase On-Demand Lab

On Demand Lab

30 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$249

Extension

30 DAYS
LAB EXTENSION
+
ONE COMPLEMENTARY EXAM ATTEMPT

$199

On Demand Lab

60 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$379

On Demand Lab

90 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

$499

Exam Reattempts and Lab Extensions are exclusively available to registered students of the course.

Reattempt

EXAM
REATTEMPT

$99

Certificate Renewal - Only For Existing ACPT Certified Student

Course access and one renewal exam attempt is free. If you want to access the lab for practice or need another renewal exam attempt, purchase that from here.

Reattempt

ADDITIONAL
RENEWAL EXAM

$29

Extension

30 DAYS LAB ACCESS FOR CERT RENEWAL

$149

Add to cart

.

Purchase includes : 30 days lab access + course material + one certification exam attempt

Terms of Purchase and Use:

You can start your lab access anytime within 90 days (180 days in case you have purchased the lab on Diwali / Black Friday sale) of purchase.
You can use your registered email address to access the lab portal enterprisesecurity.io.
One Certification Exam attempt is included in the pricing. Additional exam attempts will be $99 each.
Once connected over VPN, consider the lab to be a hostile environment and you are responsible for your computer's security.
The above lab is a shared environment and certain pre-specified machines will be off-limits.
If you want a dedicated lab just for yourself at extra cost, please use the form in the Contact tab.

AlteredSecurity Certified Penetration Tester (ACPT)

The "AlteredSecurity Certified Penetration Tester" is a completely hands-on certification. To be certified, a student must solve practical and realistic challenges in a fully patched enterprise-like lab containing multiple Linux and Windows machines. The certification challenges a student to compromise the lab environment by abusing features and functionalities without relying on patchable exploits. Students will have 24 hours for the hands-on certification exam.

A certificate holder has demonstrated the understanding of Network and Infrastructure security of an Enterprise environment. They understand and have hands-on capability to execute attack techniques like Linux and Windows privilege escalation, pivoting and tunnelling, AD CS abuse, Looting Windows Machines, antivirus evasion, and more for a large network.

In case you have to retake the exam, a re-attempt fee of $99 is applicable. There is a cool down period of one month before a student can appear in the exam again. The student will get an exam environment from the pool of our different exam labs. After a total of 3 attempts (1 included with the lab and two additional attempts), a student must wait for a cool down period of 6 months. Students found engaging in unfair practices will be subject to a cooldown period of 6 months, and a second offense will result in a permanent ban.

Exam Structure

The students are provided access to a dedicated exam environment, with fully patched Server 2022 machines with configurations and privileges like a real enterprise environment.

To be successful, students must compromise the environment by carefully constructing attack paths. The students will need to understand Network and Infrastructure security of an Enterprise environment works, as we expect abuse of features and not use of exploits.

At the end of the exam, students need to submit a detailed report of their approach along with the final flag included in the report.

Certificate Benefits

ACPT demonstrates that the holder is ready for a penetration testing job role. A certificate holder has demonstrated the understanding of Network and Infrastructure security of an Enterprise environment. They understand and have hands-on capability to execute attack techniques like Linux and Windows privilege escalation, pivoting and tunnelling, AD CS abuse, Looting Windows Machines, antivirus evasion, and more for a large network.

The certificate holder is ready for the next level that is Certified Red Team Professional: https://www.alteredsecurity.com/adlab

Exam FAQs

24 Learning Objectives, 57 Tasks, >120 Hours of Learning

I. Introduction

Introduction to Penetration Testing.
Distinction from Red Teaming.
How to write Reports.
Introduction to NetExec and why we will talk so much about it.
Cycles of Engagement.

II. Initial Access

Abuse Read/Write permissions on NFS share.
Basic Web application abuse

III. Enumeration

Use NetExec to enumerate NFS in the network.
Port scanning and services discovery.
Understand and practice extracting useful information like users, groups, computers, user properties from Active Directory.

IV. Privilege Escalation

Learn and practice Local Privilege Escalation techniques on Linux and Windows machines.
Replay credentials to find elevated privileges on other machines.
Abuse SeImpersonate privileges to escalate privilege on Windows machines.

V. Anti Virus Evasion

Learn to evade Windows Defender AV using methods like obfuscation and string manipulation etc.

VI. Tunnelling and Pivoting

Learn how to set up tunnelling using ssh to attack the enterprise from your foothold.
Learn how to use Ligolo-Ng for pivoting for General Authentication, Kerberos, and Local Authentication.
Abuse Layer 2 VPN to access segment networks.

VII. Looting Windows machines

Hunt for fileshares.
Learn to extract credentials from multiple locations like LSA, SAM, and DPAPI.
Learn how to impersonate a user session.
Use of uncommon protocols for attacks.

VIII. Domain Privilege Escalation

Find active sessions of high privilege domain accounts like Domain Admins, impersonate their session and then use them to escalate privileges.
Abuse minimal rights required for attacks like DCSync by modifying ACLs of domain objects.

IX. Relaying

Execute relay attacks using user and machine accounts.
Execute cross-protocol relay attacks.

X. Abusing AD CS and SQL Servers

Abuse SQL Servers and extract secrets from database.
Learn about Active Directory Certificate Services.
Execute Domain Privilege escalation attack by abusing AD CS.

XI. Custom module development for NetExec

Learn to develop a custom NetExec module for tunneling. Use the module in the lab to perform network pivoting.

AlteredSecurity Certified Penetration Tester Lab Objective

What's Included

What will you Learn?

​​​Get started with penetration testing. Understand the mindset, methodology and skills required to attack a modern Enterprise environment.

Learn and practice techniques and tools (NetExec and other) used for security assessments and penetration tests.

Attack a truly segmented network and use tunnels and Layer 2 VPN for network pivots.

The lab contains full patched Server 2022 machines. Whatever you learn and practice in the course will be useful in your job from day one.

Prerequisites for the course

Purchase On-Demand Lab

30 DAYS LAB ACCESS + LIFE TIME ACCESS TO COURSE MATERIAL + ONE CERTIFICATION EXAM ATTEMPT

$249

​30 DAYS LAB EXTENSION + ONE COMPLEMENTARY EXAM ATTEMPT

$199

60 DAYS LAB ACCESS + LIFE TIME ACCESS TO COURSE MATERIAL + ONE CERTIFICATION EXAM ATTEMPT

$379

90 DAYS LAB ACCESS + LIFE TIME ACCESS TO COURSE MATERIAL + ONE CERTIFICATION EXAM ATTEMPT

$499

Exam Reattempts and Lab Extensions are exclusively available to registered students of the course.

EXAM REATTEMPT

$99

Course access and one renewal exam attempt is free. If you want to access the lab for practice or need another renewal exam attempt, purchase that from here.

30 DAYS LAB ACCESS FOR CERT RENEWAL

$149

ADDITIONAL RENEWAL EXAM

$29

Add to cart

.

Purchase includes : 30 days lab access + course material + one certification exam attempt

Terms of Purchase and Use:

You can start your lab access anytime within 90 days (180 days in case you have purchased the lab on Diwali / Black Friday sale) of purchase.

You can use your registered email address to access the lab portal enterprisesecurity.io.

One Certification Exam attempt is included in the pricing. Additional exam attempts will be $99 each.

Once connected over VPN, consider the lab to be a hostile environment and you are responsible for your computer's security.

The above lab is a shared environment and certain pre-specified machines will be off-limits.

If you want a dedicated lab just for yourself at extra cost, please use the form in the Contact tab.

Get started with penetration testing. Understand the mindset, methodology and skills required to attack a modern Enterprise environment.

30 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

30 DAYS
LAB EXTENSION
+
ONE COMPLEMENTARY EXAM ATTEMPT

60 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

90 DAYS LAB ACCESS
+
LIFE TIME ACCESS TO COURSE MATERIAL
+
ONE CERTIFICATION EXAM ATTEMPT

EXAM
REATTEMPT

ADDITIONAL
RENEWAL EXAM