GIAC Penetration Tester (GPEN) Certification

Offensive Operations Certification Overview

Validates the ability to conduct a penetration test with effective techniques and methodologies, from detailed reconnaissance to exploitation.

Explore SEC560 Course Register for the Exam

Jump to:

Overview
Exam Objectives
Course Alignment
Who It's For
FAQs

What Is the GPEN Certification?

The GIAC Penetration Tester (GPEN) certification validates a practitioner's ability to properly conduct a penetration test using effective techniques and methodologies. GPEN holders can conduct exploits, perform detailed environmental reconnaissance, and apply a process-oriented approach to penetration testing projects.

By the numbers

3 hrs

Exam duration

Questions

73%

Min. passing score

What GPEN Covers

GPEN's 16 published exam objectives group into five practical areas, which map to Sections 1 through 5 of SEC560.

Planning, Recon, and Scanning

Covers Penetration Test Planning, Reconnaissance, and Scanning and Host Discovery.

Scanning and Initial Access

Covers Password Attacks, Password Formats and Hashes, Vulnerability Scanning, Azure Overview, Attacks, and AD Integration, and Azure Applications and Attack Strategies.

Exploitation and Post-Exploitation

Covers Exploitation Fundamentals, Escalation and Exploitation, Metasploit, Attacking Password Hashes, Advanced Password Attacks, and Command and Control (C2).

Kerberos and Active Directory Attacks

Covers Kerberos Attacks against Active Directory authentication.

Domain Escalation and Persistence

Covers Domain Escalation and Persistence Attacks used to consolidate and maintain administrative access.

Prepare With This Course

SEC560: Enterprise Penetration Testing

Course Details

How SEC560 Prepares You for GPEN

SEC560 is built around the exam objectives that make up the GPEN certification:

Section 1, Miniature Engagement, Recon, and Scanning builds skills tested under Penetration Test Planning, Reconnaissance, and Scanning and Host Discovery.
Section 2, Scanning and Initial Access aligns with Vulnerability Scanning, Password Formats and Hashes, Azure Overview, Attacks, and AD Integration, and Azure Applications and Attack Strategies.
Section 3, Post-Exploitation builds skills tested under Exploitation Fundamentals, Escalation and Exploitation, Metasploit, Attacking Password Hashes, Advanced Password Attacks, and Command and Control (C2).
Section 4, Domain Privilege Escalation and Lateral Movement aligns with Kerberos Attacks.
Section 5, Persistence and Evading Controls builds skills tested under Domain Escalation and Persistence Attacks.

Across all 6 sections, 30 hands-on labs and a capstone Capture the Flag competition give you the chance to apply each skill against realistic enterprise networks before you sit the exam.

Read the full GPEN certification overview here.

SEC560 Authors

Jeff McJunkin

Member of Technical Staff at Cyber Applied Research at OpenAI

Jeff McJunkin brings decades of systems, network, and offensive security experience to SANS. Now an MTS for OpenAI, he has led enterprise penetration tests, built Core NetWars experiences, and authored SEC580 while co-authoring SEC560.

Learn more

Jon Gorenflo

Information Security Consultant at Fundamental Security

Jon Gorenflo brings enterprise penetration testing, incident response, and security architecture experience to SANS. CEO of ATTACKD, he co-authored SEC560, teaches SEC504, and leads community learning through Hackers Teaching Hackers.

Learn more

Who Should Pursue GPEN

Penetration Testers and Ethical Hackers

Red and Blue Team Members

Security Analysts and Engineers Assessing Networks and Systems

System Administrators Hardening Enterprise Environments

Incident Responders and Forensic Specialists Studying Attacker Techniques

Auditors Requiring Technical Security Validation

Frequently Asked Questions

GPEN proves you can properly conduct a penetration test using effective techniques and methodologies. Certification holders can conduct exploits, perform detailed environmental reconnaissance, and apply a process-oriented approach to penetration testing projects.

One proctored exam of 82 questions over 3 hours, with a minimum passing score of 73%. GIAC periodically reviews exam specifications, so confirm the format and passing score that apply to your specific attempt in the Certification Information section of your GIAC account.

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC's renewal page.

GPEN is built for penetration testers, ethical hackers, red team and blue team operators, security analysts and engineers assessing networks and systems, system administrators hardening enterprise environments, incident responders and forensic specialists studying attacker techniques, and auditors requiring technical security validation.

SEC560: Enterprise Penetration Testing aligns with GPEN's exam objectives, with 30 hands-on labs across six sections and a capstone Capture the Flag competition against realistic enterprise networks.

SANS Institute is a training organization. GIAC LLC is an independent certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO/IEC 17024:2012. Completion of SANS training is not required for GIAC certification, nor does it guarantee a passing exam result.

Ready to earn your GPEN certification?

Add the GPEN exam attempt when you register for SEC560.

Already trained? Register for the exam directly through GIAC here.

SEC536: Adversarial AI - Penetration Testing AI Systems