// -

I passed PJPT. The Practical Junior Penetration Tester certification by TCM Security. In this post I want to give my honest take on the preparation, what the exam is actually like, the report writing phase, and whether the whole thing is worth your time and money. What is PJPT? According to TCM Security, PJPT is an associate-level exam for beginners looking to get into penetration testing and red teaming. You get 2 full days to complete the assessment by exploiting a vulnerable Active Directory environment, and an additional 2 days to write a commercial-grade penetration testing report. The voucher is valid for 12 months and comes with one free retake in case you don’t make it on the first try, which is a nice safety net.