🧭 TCM Security
Practical Network Penetration Tester
Chain recon, exploitation, and Active Directory attacks the way a real assessment runs — then write it up. The most true-to-the-job practical cert.
the exam
What you're training for
5-day hands-on network pentest + report + live debrief.
who it's for
Right for you if…
Learners who want the real engagement experience.
~/blueprint
The domains you'll master.
Active Directory6 missions
Domain ReconPassword SprayKerberoast the Service AccountFollow the BloodHound PathPass the HashDCSync — Domain Domination
Exploitation8 missions
SUID HuntWritable CronHistory LootFirst ContactCapabilitiesThe Pivot+2 more
Information Gathering9 missions
Read the ScopeName ResolutionOpen PortsYour First EngagementHeader InspectorAccess Log Recon+3 more
Reporting2 missions
Authorized, or a Crime?The Engagement Report
Clear the blueprint. Earn the credential.
Solve every mission mapped to PNPT and you unlock a verifiable PNPT-Ready credential on your public portfolio — proof you can do the work, not just pass a quiz.