eWPTX Certification

Web application Penetration Tester eXtreme

The eWPTX is our most advanced web application pentesting certification. The exam requires students to perform an expert-level penetration test that is then assessed by INE’s cyber security instructors. Students are expected to provide a complete report of their findings as they would in the corporate sector in order to pass.

eWPTX - Web-application Penetration Tester eXtreme
The Exam
You can prepare for the eWPTX exam through the INE’s Advanced Web Application Penetration Testing learning path.

The candidate will receive a real-world engagement within INE’s Virtual Lab environment. You will need an Internet connection and VPN software in order to carry out this exam.

Why eWPTX ?

Here are some of the ways the Web application Penetration Tester eXtreme certification is different from conventional certifications:

  • The exam was designed by a cyber security veteran and is based on a real-world scenario experienced in the field.
  • You must deploy multiple advanced methodologies to conduct a thorough pentest then present your findings in a detailed, corporate-level report.
  • In order to pass, individuals must combine expert knowledge with attention to detail and critical thinking.

Knowledge Domains
The eWPTX assesses and certifies your skills in the following areas:

  • Penetration testing processes and methodologies
  • Web application analysis and inspection
  • Advanced Reporting skills and Remediation
  • Advanced knowledge and abilities to bypass basics advanced XSS, SQLi, etc. filters
  • Advanced knowledge of different Database Management Systems
  • Ability to create custom exploits when the modern tools fail

Prerequisites
The eWPTX is a certification for individuals with a highly technical understanding of web application security. Anyone can attempt the certification exam, however here are the advised skills and knowledge you need to achieve a successful outcome:

  • Letters of engagement and the basics related to a penetration testing engagement
  • Web application standards and protocols
  • Functional and infrastructural analyses on web applications
  • Ability to create custom payloads according to the target Web Application
  • Vulnerability assessments of web applications
  • Manual exploitation of web applications
  • Ability in performing post-exploitation techniques
  • Outstanding reporting skills

Expiration

Certification Process

There are two ways to get certified.

Purchase an INE subscription and take the Advanced Web Application Penetration Testing learning path.

The Advanced Web Application Penetration Testing learning path takes you from a professional understanding of web application penetration testing to an Advanced level.

OR

Attempt the certification without training

Candidates that feel prepared to demonstrate their practical and professional skills can purchase an eWPTX voucher and go through the certification process at their own risk.

Whether you are attempting the eWPTX certification exam on your own or after having completed our approved training, you will need to follow these steps to get a certificate:

Whether you are attempting the certification exam on your own or after completing one of our approved learning paths, you will need to purchase an exam voucher before you can start your certification process. Once you obtain the voucher you will receive login credentials to our Certification area where you will manage the exam, the VPN credentials, and any other materials related to the certification process.

Regular vouchers expire after 180 days from purchase. Before the certification expires, you will have to begin the certification process by clicking on “Begin certification process”. The expiration date will always be available in your certification area and reminder emails are sent to make sure you take advantage of the voucher.

Once you click on the “Begin certification process” button, you will receive an email with instructions regarding the scope of engagement. This letter will contain everything you need to know to take your exam.

Once you have completed the exam portion, it’s time to finalize your report. This should be a commercial grade report proving all of your findings and providing remediation steps for your client. You must submit your report within 14 days from the beginning of the certification process (step 2), in PDF format for review.

You are awarded the certification after an INE Security instructor carefully reviews your findings and deems your work sufficient. Should you fail the first attempt, you will receive valuable feedback from our instructors. You will then have one free attempt to re-take the certification.

This exam is manually graded. Once submitted, it may take up to 30 business days to receive your results.