Not Wide Enough
This page is desktop-only. Use a laptop/desktop for challenges and other competition pages.
NCPT · Offensive Security
Penetration Testing Professional
Intermediate
A competency-based assessment covering reconnaissance, web application exploitation, network attacks and privilege escalation. Passing issues the Penetration Testing Professional credential — a professional certificate, publicly verifiable and mapped to recognised skill standards.
Flags / tasks
16
Environment
Free-text
Access
Super VIP
Price
TZS 150,000
Objectives
Flag every task to complete the lab
1
In the Penetration Testing Execution Standard (PTES), what is the name of the phase that defines the boundaries, objectives and rules of engagement before any testing starts?
2
Which nmap flag enables a SYN half-open scan?
3
Which TCP service provides encrypted remote shell access on port 22?
4
Which HTTP status code is returned when a request lacks valid authentication credentials?
5
Which HTTP method replaces a resource and is idempotent, so sending it twice has the same effect as once?
6
A database server answers on TCP port 3306 — which DBMS is it?
7
Which sudoers directive allows a command to run without prompting for a password?
8
In a SQL query with single-quoted string literals, which character terminates the literal and enables injection?
9
Which open-source exploitation framework ships meterpreter, auxiliary modules and a use/exploit workflow?
10
Which nmap flag performs service and version detection on open ports?
11
Which network analysis tool provides a GUI, reads PCAP files and has a command-line sibling called tshark?
12
Which technique routes traffic through a compromised host to reach otherwise unreachable internal hosts?
13
Which file mode bit lets a binary run with the privileges of its owner?
14
In /etc/passwd, a password field of 'x' means the real hash is stored in which file?
15
Which Linux utility is the modern successor to `netstat -tulpn` for listing listening sockets?
16
Which RFC 1918 private IPv4 range covers 172.16.0.0 through 172.31.255.255?
Learning outcomes
Mapped skills
- PTES (Penetration Testing Execution Standard)
- OWASP Web Security Testing Guide v4.2
- MITRE ATT&CK Enterprise
Work through the free-text objectives below. Correct answers lock in; keep going until every task is owned. Complete all objectives to earn a unique, publicly verifiable credential (verify link, score snapshot and integrity hash) bound to this Pro Lab.