eJPT study materials
eJPT study resources

eJPT case studies

eJPT · Put your knowledge to work in context.

The INE Security Junior Penetration Tester (eJPT) is a hands-on, entry-level Red Team certification that INE Security describes as validating the knowledge, skills and abilities required to work as a junior penetration tester. It is built for people with little to no cybersecurity experience - systems administrators, IT project managers, information security officers, security engineers and analysts, developers, and staff at MSPs and MSSPs - and is positioned as the entry point to INE's Red Team certification path toward the eCPPT. The eJPT case studies are 5 cases and about 3,696 words.

1

Shared Infrastructure Mid-Assessment: Whose Host Is It Anyway?

Midway through a two-week external assessment for a 180-person logistics firm, your scope sheet lists app.engco.com plus 'discovered EngCo-owned infrastructure'. Recon turns up three things.

659 words, about 3 min
2

Domain Admin Without Stopping the Production Line

You have a foothold on 10.10.20.77, a Windows 10 workstation belonging to a plant maintenance team, obtained by cracking an NTLMv2 challenge with the password 'Maintenance1'. It is 03:10 local time; the plant runs three shifts and the SCADA-adjacent production line is live.

725 words, about 4 min
3

Two Hundred Findings and a Thursday Change Board

You are auditing 60 Ubuntu 20.04 application servers for a payment processor. Your authenticated CIS-style script returns 214 findings, including: 41 hosts with PermitRootLogin yes in /etc/ssh/sshd config ; 55 hosts with NOPASSWD sudo for the group deploy ; 12 hosts running a kernel with a known local privilege-escalation CVE; 7 hosts that are still reachable on the network but whose CMDB record says decommissioned six months ago; and 3 hosts with a world-readable shadow file.

734 words, about 4 min
4

WAF, SOAR and a Six-Second Delay

You are testing shop.example.com. The login form locks an account after 5 failed attempts for 15 minutes.

756 words, about 4 min
5

Spraying Into an Unknown Lockout Policy

Internal engagement on 10.0.50.0/24. You have a two-hour window on Sunday 01:00-03:00.

822 words, about 4 min