عراب ال IT 
امتحانات دوليه
eLearnSecurity Junior Penetration Tester
About the Certification
This is a 100% hands-on certification designed for beginners in Penetration Testing. It is considered one of the best entry-level certifications for the offensive security path (Red Team / Pentesting) because it is based on a fully practical exam with no purely theoretical multiple-choice focus. The certification focuses on network discovery, information gathering, vulnerability identification, basic exploitation techniques, network and service analysis, executing simple web and network attacks, and writing a simplified penetration testing report. This makes it the ideal first practical certification for anyone aiming to start a career as a Junior Penetration Tester.
Main Curriculum
The curriculum is divided into six main sections
- Networking Fundamentals and TCP/IP
-
- Networking basics
- TCP/IP protocols
- IP addressing & subnetting
- Understanding data flow within networks
- Exploitation and Attack Techniques
-
- Exploiting basic vulnerabilities
- Using the Metasploit Framework
- Password attacks
- Initial access techniques
- Post-Exploitation and Reporting
-
- Post-exploitation fundamentals
- Evidence collection after exploitation
- Findings documentation
- Writing a professional penetration testing report
- Operating Systems and Command Line Basics
-
- Linux fundamentals
- Windows fundamentals
- Command-line usage
- File and permission management
- Information Gathering and Enumeration
-
- Information gathering (Passive & Active Reconnaissance)
- Network scanning using Nmap
- Service and system enumeration
- Scan result analysis
- Vulnerability Assessment and Security Issues
-
- Vulnerability discovery
- Network & host vulnerabilities
- Web application vulnerabilities
- Misconfigurations
Exam Details
- Exam code: eJPT
- Number of questions: 20–35 questions
- Question types: Multiple choice Practical questions Reporting and result-based questions (e.g., Flags / Credentials)
- Exam duration: 48 hours
- Language: English
- Passing score: Approximately 70%
- Exam fee: USD 249 (may vary by country and may include taxes)
- Certification validity: 3 years
Do I need certifications before it ?
No, not at all.
However, from a technical standpoint, it is recommended to have basic knowledge of Networking and Linux, the ability to use the command line, and familiarity with simple tools such as Ping, Nmap, and basic Linux commands. With these fundamentals, you will be ready to start.
Which certifications are recommended after this one ?
Not mandatory. However, for those seeking a strong hands-on penetration testing path especially in network testing, web application testing, and fundamental attack and defense techniques the eJPT (eLearnSecurity Junior Penetration Tester) is the strongest practical starting point.
What are the main uses of the eJPT certification ?
- PNPT or PJPT to move from beginner to deeper and more structured practical penetration testing.
- PenTest+ to strengthen theoretical and methodological penetration testing foundations.
- CEH to expand general knowledge in ethical hacking concepts and tools.
- OSCP to reach a high professional level in hands-on penetration testing.
- Web Application Pentesting to specialize in web attacks (OWASP / Burp Suite / APIs).
- Blue Team Fundamentals (optional) to understand defense, analysis, and incident response from a holistic security perspective.
Your First Step Toward Practical Penetration Testing :
This certification provides a strong and practical entry point into the penetration testing field. The eJPT delivers real hands-on experience in vulnerability exploitation and network analysis, making it the perfect step before intermediate and advanced offensive security certifications. It is the first true practical step into the world of Penetration Testing.
Who is this certification suitable for ?
- Beginners in penetration testing.
- Cybersecurity students.
- SOC analysts aiming to transition to the offensive path.
- IT / Network technicians interested in learning attack techniques.
- Anyone targeting OSCP in the future.