Skill

Penetration Testing

Penetration Testing involves ethically hacking systems to find vulnerabilities before bad actors do. You'll use the same tools and techniques as real attackers.

Offensive

Learning path

Learn networking and Linux, practice on CTFs, get hands-on with Kali.

Career relevance

Essential for penetration testers, red team members, security consultants.

Practice projects

Attack a deliberately vulnerable VM
Run Metasploitable 2 on an isolated virtual network, enumerate it with Nmap and gain access to at least two services. Only test systems you own.
What you'll have: A short pentest report with findings, evidence and fixes.
Work a VulnHub machine end to end
Download a VulnHub machine, check it against its published checksum, run it on a host-only network and work from first scan to root, writing down each step, including dead ends.
What you'll have: A walkthrough that shows your method as well as the result.

Certifications teaching Penetration Testing

Intermediate2

EC-Council

Intermediate

Certified Ethical Hacker

Tests recognition of attack techniques across nine domains in a 125-question exam, with an optional six-hour hands-on Practical leading to CEH Master

Exam: $950
Study: 4-6 months

CompTIA

Intermediate

CompTIA PenTest+

Covers a full penetration test from scoping to report, including Active Directory, cloud and AI attacks, through scenario-based questions rather than a live lab

Exam: $439
Study: 2-3 months

Advanced2

OffSec

Advanced

OffSec Certified Professional

Proctored 24-hour practical with an Active Directory set; passing now awards lifetime OSCP plus a three-year OSCP+

Exam: $1,699
Study: 3-6 months

GIAC