skills.rest
yogiex
yogiexCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

cpent

Guides CPENT exam preparation covering pivoting, binary exploitation, IoT/SCADA attacks, and report writing.

Updated Jun 5, 2026
Search Tags:#penetration testing#pivoting#scada#active directory#exam preparation#binary exploitation#cpent
One-click install
npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill cpent-yogiex
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cpent
Source: https://github.com/yogiex/opencode-cyber-security-skills/tree/main/skills/cpent
Command: npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill cpent-yogiex

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Preparing for the EC-Council CPENT exam requires mastering 14 modules spanning Windows/Linux attacks, 32/64-bit binary exploitation, double pivoting, and IoT/OT/SCADA protocols, and candidates often lack a structured methodology and zone-by-zone strategy for the 24-hour practical exam. ## Core Features & Use Cases - Exam Methodology & Mindset: Provides the "Penetrate Deeper" workflow with parallel enumeration, time management plans for continuous or split exam formats, and scoring breakdowns (70% CPENT, 90% LPT Master). - Technical Attack References: Covers Pass-the-Hash, DCSync, Kerberos attacks, kernel exploits (Dirty Pipe, PwnKit), x86 stack overflows, x64 ROP chains, Modbus/PLC exploitation, and double pivoting with Ligolo-ng and Chisel. - Report Writing Guidance: Details the EC-Council report format worth 30% of the score, including screenshot requirements, CVSS scoring, and network diagram expectations. - Use Case: A penetration tester preparing for the CPENT exam asks for a double-pivoting strategy and receives the two-layer network methodology, tool setup with Ligolo-ng, and the exam zone checklist. ## Quick Start Ask the agent to explain the CPENT double pivoting strategy and which tools to prepare before exam day.

Frequently Asked Questions about cpent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prepare for the CPENT exam?▼

Focus on the 14 core modules: Windows/Linux attacks, web exploitation, binary exploitation for x86 and x64, wireless, IoT, OT/SCADA, and double pivoting. Practice pivoting with Ligolo-ng and Chisel, and write reports during practice since documentation is 30% of the score.

What is double pivoting in penetration testing?▼

Double pivoting means crossing two network layers: compromise a gateway host to reach subnet A, find a dual-homed host there, then pivot again into subnet B where the target lives. Ligolo-ng is recommended because its TUN interface lets all tools run natively through the tunnel.

What is the difference between CPENT and OSCP?▼

CPENT encourages automated tools like sqlmap, Metasploit, and Burp Pro, while OSCP restricts them. CPENT emphasizes pivoting depth across multiple network zones, IoT/SCADA targets, and 64-bit binary exploitation, whereas OSCP focuses on single-machine exploitation.

How does 64-bit binary exploitation differ from 32-bit?▼

x64 uses the fastcall calling convention passing arguments in rcx, rdx, r8, and r9 instead of the stack, and requires ROP chains to bypass NX/DEP since you cannot jump directly to the stack. Use ROPgadget or Ropper to find gadgets like pop rdi and pop rsi.

What tools are allowed during the CPENT exam?▼

All automated tools are allowed including Burp Suite Pro, sqlmap, Metasploit, and Nmap scripts. The exam is open book so notes and online resources are permitted, but AI chatbots and assistance from other people are prohibited under live proctoring.

What score is needed to pass CPENT and earn LPT Master?▼

Scoring 70% passes the CPENT exam, while 90% or higher automatically earns the LPT Master credential. The exam contains 5 challenges across standalone, complex, double pivot, and IoT zones, with the report due within 7 days.

Related Skills

Explore More Software Engineering Skills→
SnailSploitSnailSploit
2.9k

basic-exploitation

Teach foundational Linux exploit development with stack overflows, ROP chains, and shellcode injection.

Community
Advanced
noname300989noname300989

report-generator

Generate security reports with CVSS v3.1 scoring and remediation guidance.

Community
Advanced
nfbs2000nfbs2000

phrack-exploit-analyzer

Analyze Phrack articles and develop exploits for real-world vulnerabilities.

Community
Advanced
zebbernzebbern
34

OSCP Penetration Testing Methodology

Provides OSCP-standard penetration methodology across Windows, Linux, and Active Directory environments.

Community
Advanced