Hack The Box — Certification
Certified Active Directory Pentesting Expert [CAPE]
Certificate details

Our certifications are recognized by world's top companies
Certification Description
HTB Certified Active Directory Pentesting Expert (HTB CAPE) is a highly hands-on certification assessing candidates' skills in identifying and exploiting advanced Active Directory (AD) vulnerabilities. HTB CAPE certification holders will possess technical competency in both internal and external AD and Windows penetration testing, understanding complex attack paths, and employing advanced techniques to exploit them. HTB CAPE certification holders will demonstrate proficiency in executing sophisticated attacks abusing different authentication protocols such as Kerberos and NTLM and abusing misconfigurations within AD components such as ADCS, WSUS, Exchange, and Domain Trusts. Furthermore, they will be adept at leveraging specialized tools to exploit AD from Linux and Windows and utilizing Command and Control (C2) frameworks for post-exploitation operations.
Who is this for:
- Senior Penetration Testers
- Windows & Active Directory Penetration Testers
- Red Team Operators
- Active Directory Security Specialists
- System Administrators
- Cybersecurity Consultants
- Security Analysts
Key Differentiators
Prerequisites
1. Enroll in the Active Directory Penetration Tester job-role path and complete all included modules.
The following is a list of prerequisites for a successful outcome:
- Interpreting a letter of engagement
- Advanced knowledge of Active Directory infrastructure and security concepts
- Knowledge around Windows and Active Directory and their functionality
- Understanding Active Directory authentication protocols (Kerberos, NTLM, LDAP, Certificate based-authentication, etc.)
- Familiarity with common and advanced Active Directory attacks and exploitation techniques
- Proficiency in navigating complex AD structures and understanding AD permissions and policies
- Ability to detect and exploit misconfigurations in Active Directory environments
- Knowledge of bypass techniques to circumvent various security measures in Windows environments
- Capability to recommend and implement security hardening measures for AD
- Professionally communicating and reporting vulnerabilities
Knowledge Domains
- Advanced Active Directory Enumeration
- Advanced Active Directory Attacks
- Abusing AD Protocols
- Abusing AD Trusts
- Abusing AD Misconfigurations
- Abusing Common Active Directory Components
- Command and Control (C2) Operations
- Windows Evasion
- Pivoting & Lateral Movement
- Advanced Post-exploitation Tactics


