Certification Programmes

MCSI Certification

MPT - Certified Penetration Tester

Penetration testing, also known as pen testing, is the process of attempting to breach the security of a computer system or network. Pen testers use a variety of methods to attempt to penetrate a system, including but not limited to, trying to guess passwords, exploiting vulnerabilities, and using social engineering techniques.

It takes a special kind of person to be a penetration tester - someone with the skills to find security vulnerabilities and exploit them. To be successful in this career, you need to be good at hacking, reverse engineering, and cryptography. You must also be able to think like a hacker, reasoning your way through complex problems and identifying potential exploits.

An MCSI qualified professional penetration tester can provide comprehensive web application and infrastructure penetration tests. By identifying and exploiting vulnerabilities, a pen tester can help organizations identify and fix security weaknesses before they can be exploited by malicious actors.

The MPT Certification from MCSI signifies that you have the competencies that the industry is seeking, making you a valuable asset for Penetration Testing jobs worldwide.

Register Now Course Overview
Intermediate Level MCSI Certification Intermediate
ic-certificate Certification
ic-clock 600+ hours
cpe-points 261
ic-money US$450
No Expiry, No Renewals

Course Overview

"If you want to know what's really going on, you need to hack the system."

Penetration testing can be difficult because it requires a high degree of knowledge in many different areas. In order to be a successful pentester, you need to be familiar with network protocols, operating systems, and software vulnerabilities. Additionally, you must have the ability to think like a hacker in order to exploit these vulnerabilities. This can be a challenge, but it is also what makes pentesting so interesting.

Penetration testers are in high demand as businesses strive to protect their networks and data. They may earn salaries ranging from $50,000 to $200,000, depending on their experience, skills, and certifications. Many companies also offer bonuses and other benefits, such as travel opportunities.

The MCSI MPT certification is designed to teach penetration testing skills. The certification covers topics such as network mapping, scanning for vulnerabilities, exploiting vulnerabilities, and post-attack actions. The certification is also designed to teach students how to use various tools and techniques to identify and exploit security vulnerabilities in networks.

The MCSI Penetration Testing certification will equip you with the skillset necessary to carry out the following tasks:

  • Understand the vulnerability research and exploitation process in full
  • Develop custom penetration testing tools
  • Master the major penetration testing tools and use them when it's appropriate
  • Perform code reviews and dynamic fuzzing
  • Write penetration testing proposals and reports that delight customers

The MPT course was created by instructors that compromised over 100,000 machines during penetration testing engagements. The MPT course is designed to help you do the same. The course covers everything from reconnaissance, to exploiting systems, to defending networks. The goal of the course is to provide you with the skills and knowledge necessary to protect your systems and networks from the bad guys.

If you're looking to start a career in information security, or simply want to learn how to protect your systems from the bad guys, the MPT course is for you.

Knowledge, Skills and Abilities You Will Acquire

MCSI is one of the most respected and trusted names in cyber security education and training. Our certifications teach critical skills, knowledge and abilities needed to advance a career in cyber security. Our courses are comprehensive and up-to-date, and our instructors are experienced professionals who are dedicated to helping students learn. MCSI provides the real-world skills and knowledge you need to protect any organization from cyber threats.

  • Understand and apply industry standard penetration testing methodologies

    There are a variety of penetration testing methodologies that can be used to test the security of an environment. The most common are as follows:

    Threat Modeling

    This approach involves identifying and classifying potential threats to a system and then determining how best to protect against them.

    Black-box Testing

    Also known as ethical hacking, black box testing is designed to simulate an attack by a malicious outsider. The tester is given no information about the system other than what is available to the average user.

    White-box Testing

    This approach is the opposite of black box testing, and involves providing the tester with extensive information about the system, including its internal workings.

    Gray-box Testing

    A combination of black and white box testing, gray box testing provides limited information to the tester about the system's internals.

    Vulnerability Scanning

    This is a process of identifying potential security vulnerabilities in a system through the use of automated software.

  • Identify and exploit the most common web application vulnerabilities

    Web application penetration testing is the process of assessing the security of a web application by identifying and exploiting vulnerabilities. The goal of penetration testing is to identify and exploit vulnerabilities in order to assess the security of the application.

    SQL Injection

    SQL injection is a technique used to attack databases through the use of specially crafted SQL statements. These statements can be used to extract data from the database, or to execute malicious code on the server.

    Object Injection

    Object injection is a vulnerability that can allow an attacker to execute unintended actions or access sensitive data by manipulating the objects passed to an application. An attacker can exploit object injection vulnerabilities by passing objects that contain malicious code or data into an application. If the application fails to properly sanitize the input, the malicious code or data can be executed or accessed by the application.

    XXE Injection

    XXE injection is a vulnerability that allows attackers to read files or even execute malicious code on the server, by sending specially crafted XML documents to the vulnerable application.

    Arbitrary Command Execution

    Arbitrary Command Execution is a vulnerability that allows an attacker to execute arbitrary commands on a target system. This can be accomplished by exploiting a vulnerable user input in an application that allows the user to input arbitrary commands.

    File Inclusion

    A file inclusion vulnerability is a vulnerability that allows an attacker to include files on the server that should not be accessible. This can allow the attacker to execute code on the server or access sensitive data.

    Cross-Site Scripting

    Cross-site scripting (XSS) is a vulnerability that allows an attacker to inject malicious code into a web page, resulting in the execution of the code by unsuspecting users who visit the page. The code can be used to exploit the user's session, for example, by stealing cookies or other credentials. It can also be used to execute malicious code on the user's machine.

    Brute Forcing

    Brute force login pages is a technique where a hacker tries to guess your username and password by trying different combinations until they find the right one.

    Session Fixation

    A session fixation vulnerability is a flaw in a web application that allows an attacker to hijack a user's session and gain control of their account. This can be exploited by tricking the user into clicking a link or opening an email that contains a specially crafted session ID. Once the attacker has hijacked the session, they can access the user's account and take any actions they please.

  • Identify and exploit the most common infrastructure vulnerabilities

    Infrastructure penetration testing is a process of identifying and exploiting security vulnerabilities in an organization's computer systems and networks. The aim of this type of testing is to identify potential entry points that could be used by an attacker to gain access to the organization's systems and data.

    Missing critical security patches

    One of the main reasons that attackers are able to penetrate networks is because many organizations do not keep their systems up to date with the latest security patches. By identifying and applying missing security patches, you can make it much more difficult for attackers to penetrate your network. As a penetration tester, using publicly available exploits against unpatched systems is one of the easiest techniques to compromise machines.

    Privilege escalation

    Privilege escalation is the process of exploiting a vulnerability in order to gain elevated access to resources that are normally protected from an unauthorized user. This can include gaining access to data, systems, or devices that are restricted to a particular user or group.

    One of the most common methods of privilege escalation is exploiting a vulnerability in software that grants users elevated privileges. For example, a vulnerability in Microsoft Windows that allows an attacker to run code with administrative privileges.

    Dumping and reusing credential

    When it comes to penetration testing, understanding how to dump and reuse credentials is important. This enables testers to access systems and data that they might not otherwise be able to. In order to dump and reuse credentials, testers first need to understand how the authentication process works. Once they have this information, they can use various methods to extract the credentials that are being used. These methods might include using password cracking tools or sniffing traffic. Once the credentials are extracted, they can be reused in subsequent tests.

    Lateral movement and pivoting

    Lateral movement and pivoting are two common techniques used in information security testing. Lateral movement is the process of moving from one part of a network to another in order to gain access to additional systems or data. Pivoting is the use of a compromised system as a stepping stone to attack other systems on the network. Both techniques can be used to help penetrate networks that would otherwise be difficult to breach.

    Tunnelling

    Tunnelling is a method of transporting data packets through a network by creating a virtual tunnel between two points. Tunnelling is often used to bypass security measures, such as firewalls and intrusion detection systems, that are in place to protect the network. Tunnelling can also be used to smuggle information in and out of a network without the knowledge of the network administrators.

  • Identify and exploit memory corruption vulnerabilities

    The MPT course teaches the basics of memory exploitation techniques, including how to find and exploit buffer overflows. The course also covers how to analyze and debug exploit code.

    Stack Overflow Vulnerabilities

    A stack overflow is a problem that can occur in computer programming when the size of the stack exceeds the available memory. The stack stores local variables and function arguments, so when it becomes full, the program can crash or malfunction.

    Data Execution Prevention (DEP)

    DEP is a security feature that is used to protect software from exploitation. DEP works by preventing code from being executed from data pages. This helps to prevent malicious code from being executed, which can help to protect your system from being compromised. DEP is enabled by default on most systems, and it is important to make sure that it is enabled on your system if you want to protect it from malicious code.

    Address Space Layout Randomization (ASLR)

    The idea behind ASLR is that by randomizing the memory addresses where specific chunks of code are loaded, it becomes much more difficult for an attacker to predict where they need to look in order to find and exploit a vulnerability.

  • Write custom attack tools using scripting languages

    Scripting is an important part of penetration testing. It allows testers to automate tasks, making the process more efficient. Additionally, it can help testers find and exploit vulnerabilities more easily. Scripting also helps testers to better understand the systems they are testing, making the process more efficient and accurate.

    Python

    Python is a versatile language that can be used in a variety of ways during penetration testing engagements. It can be used as a scripting language to automate tasks, as a payload delivery mechanism, and as a debugging tool. Python can also be used to develop exploits, and to access and analyze data from compromised systems.

    Ruby

    Ruby has become a popular language for penetration testing engagements due to its flexibility and expressiveness. It has been used to write powerful scripts that can help testers automate common tasks, such as reconnaissance and vulnerability scanning.

    PowerShell

    PowerShell is a powerful scripting language that can be used for a variety of tasks, including penetration testing. It can be used to automate tasks, such as identifying vulnerable systems and gathering information about them. PowerShell can also be used to execute exploits and payloads, making it a valuable tool for penetration testers. Additionally, PowerShell scripts can be packaged into modules, making them easy to share and use. This makes PowerShell an important tool for penetration testing and security professionals.

  • Use all the major penetration testing tools

    Automated tools can help testers save time. Additionally, automated tools can help testers be more efficient and organized. They can also help testers verify that their tests are effective and identify issues that they may have missed.

    NMAP

    The Nmap tool is a network exploration and security auditing tool. It can be used to identify hosts and services on a network, as well as security issues. Nmap can be used to scan for vulnerable open ports on systems.

    Metasploit

    The Metasploit Framework is a free and open source penetration testing toolkit, originally developed by H.D.Moore. It is designed to help security professionals test their networks and systems for vulnerabilities. The Framework includes a library of exploits, payloads, and modules, as well as a command-line interface and an exploit development kit. It can be used to scan for vulnerable systems, exploit vulnerabilities, and post-exploitation attacks to servers.

    Burp Suite

    Burp Suite is a tool used for automated security testing of web applications. It can be used to find vulnerabilities in web applications, as well as to help with penetration testing and vulnerability assessment. Burp Suite consists of a variety of tools, including a proxy server, scanner, intruder, and repeater. It can be used to intercept and modify traffic between the client and the server, as well as to tunnel traffic through the proxy. This allows you to see and test the response of the application to different types of attack.

    OpenVAS

    OpenVAS is a comprehensive vulnerability scanner that can be used to identify security vulnerabilities in systems and applications. It uses a variety of techniques, including network scanning and analysis, to identify potential security flaws. OpenVAS can be used to scan for vulnerabilities in operating systems, network devices, web applications, and other systems. It is free and open source software, and can be run on a variety of platforms.

    John the Ripper

    John the Ripper is a password cracking tool that can be used to find passwords that have been encrypted using the DES, Triple DES, Blowfish, or Twofish algorithms. It can also be used to recover passwords that have been hashed using the MD5, SHA-1, or SHA-256 algorithms.

    Hashcat

    Hashcat is a tool that can be used to crack passwords. It can be used to crack passwords that are stored in a hash format, or it can be used to crack passwords that are stored in a text format.

    SSH Tunnelling

    SSH Tunnelling is a process that allows you to securely access a remote computer via a tunnel created by SSH. This can be useful for penetration testing, as it allows you to access systems that would otherwise be inaccessible.

  • Plan and deliver professional penetration testing engagements

    Assess the requirements and goals of the mission

    The first step in designing a security testing plan is to assess the requirements and goals of the project. The requirements of the project will determine the scope of the security testing. The goals of the project will determine the focus of the security testing.

    Once the requirements and goals have been assessed, the next step is to design a test plan. The test plan should include a risk assessment, which will identify potential vulnerabilities in the system. The test plan should also include a review of the security controls in place and how they will be tested.

    Identify testing constraints

    Identifying constraints is important in any security testing engagement, but is especially important in penetration tests. By understanding the environment and identifying any potential limitations, the pentester can better focus the assessment and deliver a more meaningful outcome.

    Some common constraints include:

    • The scope of the test, which may be limited by time, budget, or other factors
    • The organization's security posture, which may affect what tests can be performed
    • The availability of systems and data, which may restrict the range of attacks that can be launched
    • The presence of security controls such as firewalls and intrusion detection systems, which may impede or complicate some attacks

    By understanding these constraints and taking them into account, pentesters can tailor their tests to produce the most valuable results.

    Establish a management assurance framework

    When it comes to ensuring the security of your systems and data, having a strong management assurance framework in place is critical. This framework will help to ensure that security testing engagements are conducted in a consistent and effective manner, and that the resulting recommendations are properly implemented.

    A management assurance framework should include clearly defined roles and responsibilities for all those involved in the security testing process, as well as documented procedures and guidelines. It should also include a reporting structure, so that everyone involved can track the progress of the testing and ensure that all stakeholders are kept up to date on the findings.

    By establishing a management assurance framework, you can be sure that your security testing engagements are effectively managed and that the resulting recommendations are properly implemented, thus helping to protect your systems and data from potential security threats.

    Use an effective testing methodology

    Security testing engagements are extremely important, and using an effective testing methodology is critical to their success. By using an effective testing methodology, security professionals can ensure that they are covering all the necessary bases in their security assessments. This helps to reduce the risk of vulnerabilities going undetected, and ultimately helps to improve the security of the organization.

    Use an effective testing methodology

    There are many different ways to approach identifying and exploiting vulnerabilities in a security testing project. One common strategy is to first map the organization's assets and identify which systems and applications are most important to the business. From there, you can focus your efforts on identifying potential vulnerabilities in those systems and applications.

    Once you have a list of potential vulnerabilities, you can start exploiting them to see if they are actually exploitable. This may involve using automated tools or manual techniques to attempt to take control of the system or gain access to sensitive data. It's important to be thorough in your testing, as even a single exploitable vulnerability can provide a foothold for an attacker.

    Once you have identified and exploited all of the vulnerabilities in a system, it's important to document your findings and provide recommendations for how they can be fixed. This helps ensure that the system is secure and reduces the risk of a successful attack.

    Report key findings

    When it comes to security testing, it's important to report key findings to ensure that the project is on track and any potential security risks are addressed. Typically, a report will outline the methodology used in the testing process, as well as any major vulnerabilities that were discovered. This allows stakeholders to understand the implications of these vulnerabilities and take the necessary steps to mitigate any risks.

    It's also important to keep in mind that not all vulnerabilities are created equal. Some may be more serious than others, and it's important to rank them accordingly. This helps stakeholders prioritize which vulnerabilities should be fixed first.

    Finally, a good report will also include recommendations for how to address any vulnerabilities that were discovered. This can help ensure that the project stays on track and that any potential security risks are mitigated.

    Extract lessons learnt

    After a security testing project is complete, it's important to extract lessons learnt from the project so that the lessons can be applied to future projects.

  • Write professional penetration testing reports

    Executive Summary

    The Executive Summary is a key component of a penetration testing report. It provides a high-level overview of the findings of the assessment, and can help decision-makers quickly understand the significance of the findings. The summary should be clear and concise, and include key takeaways from the report.

    Scope of Work

    The Scope of Work section is a key part of a penetration testing report. It outlines the specific tasks that were carried out as part of the assessment. This section can help to clarify any misunderstandings about the assessment, and can provide a basis for future discussion about security improvements.

    Testing Methodology

    The Testing Methodology section in a penetration testing report is used to provide detailed information about the tests that were conducted and the results that were found. This section can be used to help explain how the testing was conducted and why certain tests were performed. It can also be used to show how the results of the tests were used to identify vulnerabilities in the system.

    Risk Matrix

    The Risk Matrix is a table that lists the potential risks associated with each vulnerability found during a penetration test. The table includes a description of each risk, the likelihood of it occurring, and the impact it would have if it did occur. This information can help organizations prioritize which vulnerabilities to fix first.

    Narrative

    The Narrative section in a security testing report provides a detailed account of the security testing process, from start to finish. It includes information about the tools and techniques used and how the vulnerabilities were discovered.

    Key Findings

    The key findings summary is a section in a security testing report that highlights the most important findings from the assessment. It includes a detailed description of all the vulnerabilities discovered, how to reproduce them and the risk level. This section is designed to provide a high-level overview of the report so that decision-makers can quickly understand the biggest risks posed by the vulnerabilities.

    Appendices

    One of the most important, but often overlooked, aspects of writing a security testing report is Including all the Technical Details in Appendices. The appendices can be as long, descriptive and full of screenshots as you need them to be.

    The technical details in appendices are essential for two reasons. First, they provide the reader with all the information needed to understand your findings. Second, they can be used as a resource by developers and system administrators who need to fix the vulnerabilities you have identified.

Career Outcomes

This certification thoroughly prepares you for the following roles:

  • Penetration Tester
  • Vulnerability Tester
  • Vulnerability Assessment Analyst
Certification Detail

MCSI certifications are highly respected and sought-after credentials in the industry. Earning an MCSI certification is a testament to your knowledge and skillset, and demonstrates your commitment to excellence. The content is cutting-edge, uniquely-designed, and hands-on. Our exercises teach in-demand skills that are immediately applicable in the field.

The certifications are valid indefinitely and do not require any renewal fees. The training is accessible without any time limits.

Syllabus

Training Modules

This course provides you with multiple training modules, each of which is designed to teach you practical skills that can help you solve important cyber problems. Each module offers exercises that will help you build your skills and capabilities.

  • MPT-QS-001: Quickstarter - 12 exercises
  • MPT-101: Lab setup - 4 exercises
  • MPT-102: Information Gathering - 4 exercises
  • MPT-103: NMAP - 16 exercises
  • MPT-104: Metasploit - 13 exercises
  • MPT-105: Mimikatz - 5 exercises
  • MPT-106: Vulnerability Scanning - 4 exercises
  • MPT-107: Linux Vulnerabilities - 8 exercises
  • MPT-108: Complementary Tools - 5 exercises
  • MPT-201: Custom Malware Development - 4 exercises
  • MPT-202: Web Application Penetration Testing - 26 exercises
  • MPT-301: Memory Corruption Vulnerabilities - 7 exercises
  • MPT-302: Documentation and Procedures - 5 exercises
  • MPT-401: Capability Development - 6 exercises

Scenarios

Cyber professionals must be ready for everything. The typical security training strategy, which focuses on individual skills and tools, is insufficient. You must be able to operate as part of a team, see the big picture, and respond swiftly and effectively to unforeseen circumstances. That's why, as part of our training, we use replays of whole cyber missions. Our scenarios help you prepare for the demands of the job and give you confidence in your ability to work professionally.

  • MPT-SC-01: Patch Analysis - 2 exercises
  • MPT-SC-02: Secure Code Reviews - 4 exercises
  • MPT-SC-03: Penetration Testing Challenges - 4 exercises
  • MPT-SC-04: Operation Mission Impossible - 9 exercises

Certifications

MCSI Industry Certifications are important for you to earn because they signify that you have the skills required to work in a cybersecurity. Certificates of Completion are also important to earn because they signify that you have completed an exercise. Earning Certificates of Completion and Industry Certifications demonstrates that you are willing to put in the extra work to be successful.

1
ic-step-1

Student

2
ic-step-2

Obtain CPE points by solving exercises

3
ic-step-3

Achieve multiple certifications

4
ic-step-4

Receive help from instructors online

MCSI's MPT certification covers all six levels of the Australian Signals Directorate's Cyber Skills Framework. You will achieve a certificate upon reaching each level. Click here to learn more.

ASD Skills Proficiency Level Curriculum Completion Requirement Scenarios Completion Requirement
MCSI Penetration Testing Learner Level 1 0% 0%
MCSI Novice Penetration Tester Level 2 20% 0%
MCSI Penetration Testing Practitioner Level 3 50% 10%
MCSI Senior Penetration Testing Practitioner Level 4 70% 25%
MCSI Certified Principal Penetration Testing Practitioner Level 5 80% 50%
MCSI Certified Expert Penetration Testing Practitioner Level 6 95% 75%

In a single course, MCSI offers multiple industry certifications. You will save time and money with us because you will receive several accredited levels of competencies with a single purchase rather than having to buy multiple courses. Our goal is to provide you with a course that will take you from beginner to expert.

Career Pathways

This certification aligns with the following career pathways:

Certifications are important tools to validate your skills and knowledge. They can provide you with the credentials you need to get ahead in your career.

There are many reasons why a person should select certifications that teach practical skills over an open-book theory exam. Hands-on experience is crucial in many industries, and theory exams cannot replace the real-world application of skills. Furthermore, practical skills are often more marketable than theoretical knowledge, and can help a person secure a job in their desired field. Finally, practical skills can provide a foundation for further learning, while theory exams may only teach limited information. In conclusion, selecting a certification that teaches practical skills is the best way to ensure success in today's competitive job market.

Sample Exercises

Below are three (3) exercises from the 100+ exercises available in MPT - Certified Penetration Tester:

Write An Application Vulnerable To Cross-Site Scripting (Novice)

exercise

Use John The Ripper To Crack MySQL, MSSQL, And Postgres Credentials (Advanced Beginner)

exercise

Write A Burp Suite Extension (Competent)

exercise

Our Instructors

Student exercises are reviewed and graded by multiple instructors. This one-of-a-kind approach allows you to get highly personalized input from a number of successful professionals.

MCSI's teachers bring real-world experience and knowledge to the classroom, ensuring that students have the skills they need to excel in the field of information security. Due to their extensive experience in penetration testing, vulnerability assessment, reverse engineering, incident response, digital forensics, and exploit development, students will understand the most up-to-date defensive and offensive cybersecurity strategies and procedures.

Our instructors are passionate about information security and are always looking to further their own knowledge. Students who attend an MCSI course can be confident that they are learning from some of the best in the business. They can adapt their teaching approaches to match the demands of any student, regardless of their degree of expertise.

The MCSI team strives to provide the most comprehensive and up-to-date cybersecurity training available. Whether you are a seasoned security professional or new to the field, MCSI has a course that will meet your needs.

Received personalized feedback from cybersecurity experts:

  • Overcome challenges and hurdles preventing you from advancing your skills
  • Receive guidance on how to focus your training efforts and avoid wasting time
  • Learn how to meet the industry's quality standards and produce high-quality work
  • When you're stuck, go to a support forum or ask inquiries to the instructors right on the platform

Help and Support

Your submissions will be reviewed by MCSI instructors, who will provide you with personalized feedback. This input is critical since it can assist you in identifying the areas where you need to enhance your skills. The instructor's feedback will also tell you how well you did an exercise and what you can do to improve your performance even further.

Click here to see an example of personalized feedback.

To read a student's testimony about MCSI's feedback, click here.

Throughout the course, MCSI provides continuing support and assistance. Students have access to an online forum where they can communicate directly with the instructors. The exercises include a question form for students to ask for clarification, allowing them to get the most out of the course.

The exercises are written in a way that makes it clear what is expected of you. There is a description, specifications, guidelines, and quality expectations for each exercise. If you need more information, you can ask for it and expect a response within a few hours.

Whenever you encounter an exercise that could be improved, please contact us so that we can update it. Our catalog is kept very up-to-date, and students who propose enhancements typically receive a patch within one business day.

Actively Maintained Course

This course is actively maintained to ensure that it is current and error-free. We want to ensure that you have the best possible experience while taking this course, which includes having access to accurate and current information. This course is also tested for flaws on a regular basis, so you can be sure you're getting a high-quality product.

This course is constantly updated with the support of trustworthy industry peers to ensure that students are acquiring the most up-to-date information and skills. This dedication to staying ahead of the curve is what distinguishes this course as one of the greatest in the market.

Prerequisites

Training Laptop Requirement

This course can be completed on a standard training laptop. To ensure you have the necessary hardware to complete the course, your machine should meet the following specifications:

  • 64-bit Intel i5/i7 2.0+ GHz processor or equivalent
  • 8GB of RAM
  • Ability to run at least (1) virtual machine using Virtual Box, or an equivalent virtualization software
  • Windows 10 or later, macOS 10 or later, or Linux
  • Local administrator privileges
Do you support older operating systems?

Yes. Many of the exercises can be completed on older OS versions. A few of our students are successfully using older equipment to learn cyber security.

Proficiency in the English language

You must have the ability to comfortably read and understand IT documentation written in English. Ideally, they have an IELTS score of 6.5 with no band less than 6 (or equivalent).

Note: You can register for this course without having undertaken an English test.

Programming Skills

We recommend that you have some experience in software programming prior to registering for this course.

The preferred programming languages for this course include: Python, PHP, SQL, and some basic C. Knowledge of basic C and Assembly will also prove helpful for the reverse engineering exercises.

Confirm whether you have the following skills in order to be at the right level:

  • Write basic web applications in PHP or something equivalent
  • Have used and configured a database such as MySQL
  • Have written authentication pages and code to manage user sessions
  • Be comfortable with command line utilities and tools
  • Be capable of installing Windows and Linux virtual machines in something like VirtualBox
  • Have some experience troubleshooting and resolving software errors

Lab Environment

This course teaches you how to setup and configure your own cybersecurity lab.

There are numerous advantages to creating your own cybersecurity lab rather than paying for one. The cost savings are perhaps the most evident benefit. When compared to the expense of licensing a pre-built lab, creating your own lab can save you thousands of dollars. You also have the option of customizing the lab environment to meet your specific requirements. You can, for example, select the hardware and software that will be used in your lab.

Another advantage of setting up your own cybersecurity lab is that it allows you to learn new skills. Building a lab from the ground up necessitates knowledge of networking, system administration, and other technical subjects. This experience is invaluable in your career as a cybersecurity professional.

We frequently see students who can complete a task in a pre-built lab but cannot complete the same task at work. This is because these labs are meant to lessen work complexity, thereby creating an illusion of personal capabilities. It's also worth noting that you'll be expected to set up your own lab to test tools and techniques in the workplace. Employers may give you the resources to set up virtual computers and networks, but it will be up to you to manage the lab environment and maintain your tools.

Finally, you should know that pre-built labs are not commonly licensed by top cybersecurity professionals. They've realized that setting up a lab is simple, efficient, adaptable, cost-effective, and that it sparks creativity. It also nullifies risk of performing unauthorized actions against systems provisioned by a third-party.

Aptitude Test (Optional)

This is an intermediate course. It includes exercises for novices but assumes that they have competent IT skills and a strong understanding of cybersecurity concepts.

Aptitude Test:

If you're not sure if you'll be able to fully enjoy this course, then contact us via email to organize a free aptitude test. This test will determine whether you meet the course's basic baseline criteria. If you've never studied with us before, it will also introduce you to the MCSI Method™.

Easier Courses:

If you are convinced that this course is too difficult for you, then you should start with something easier. We recommend checking out the following courses:

You won't need to complete all of these easier courses in their entirety. Most likely, you already have adequate skills and only need to fine-tune them before taking an intermediate course like this one. Choose a route, follow it, enhance your skills, and then return to this course in a few months!

Testimonials

Why MCSI’s Penetration Testing Certification is World Class

why MCSI certifications

Comprehensive, Effective, Exceeds Standards

Holders of the MPT Certification have completed 100 practical online exercises thus demonstrating that they have the skills and knowledge required to deliver web, mobile and infrastructure penetration tests. Students take an average of 6 months to complete these exercises.

why MCSI certifications

Internals Focused

Students who have obtained this Certification have demonstrated that they have a full understanding of the vulnerability research and exploitation process. This Certification focuses on the internals of how vulnerabilities are identified and exploited rather than remembering commands for tools (though it does cover tools as well).

why MCSI certifications

Programming Oriented

Many of the challenges that students must pass to obtain this certification require students to write software in scripting languages. This guarantees that penetration testers certified by MCSI understand how vulnerabilities are created and what it takes to write custom exploitation tools.

MCSI students have submitted over 14,000 practical online exercises since December 2018.

Enrolment and Fees

Fees

US$450 (+ GST if you're based in Australia).

Practical exercises must be completed online using MCSI's Online Learning Platform.

How to enrol

  • Step 1 - Login/Register for MCSI's Online Learning Platform
  • Step 2 - Click `Shop` from the left-side menu
  • Step 3 - Find the course, select `Buy` and proceed through the checkout process.

You can purchase the training using a Credit Card or PayPal. The training is immediately available.

Terms and Conditions

  • No discounts
  • No refunds
  • No transfers
  • No renewal fees
  • No hidden fees
  • No time limits

Cooling-Off Policy

Received a full refund if you changed your mind about a purchase within 24 hours. No questions asked. Read the full details here.

Don't Buy This Course

Don't buy this course if you think learning cyber security is simple, that it will only take a few hours, that remembering a few concepts from videos and books would be enough, or, that you should be provided with walkthroughs and solutions to practical problems instead of thinking critically for yourself.

Our competitors are misleading you by claiming that their video courses and open-book theoretical certificates will teach you everything you need to know about cyber security. We recommend that you stay away from our courses until you've realized that cybersecurity requires hundreds of hours of training against difficult challenges under the watchful eye of experts encouraging you to improve your weaknesses. Only then will you understand the value of this course and the benefits that the MCSI Method™ can bring to your career. We only want satisfied customers.

How does MCSI Compare?

If you are looking for a certification that will give you an edge in the job market, look no further than MCSI certifications. Thanks to our innovative approach, cybersecurity training is more affordable and effective than traditional methods.

MCSI Certifications Traditional Vendors Industry Conferences Conference Workshop Cybersecurity Bootcamps Cyber Ranges
Cost US$450 $5,000+ $900+ $4,000+ $10,000+ $3,000+
Hours of training 600+ hours 40-48 10+ 16-40 450 40-100
Certifications 5 1 0 0 1 0
Online Yes Some No No No Yes
practical 100% 50% 0% 50% 50% 100%
Maintenance Level High Low Low Low Low Low
free trial Yes No No No No No
Access to instructors Yes Some No Yes Yes Some

Our pricing is more affordable than our competitors because we have reinvented how cyber training is done online. Our innovative Online Learning Platform is highly effective at teaching cyber security. The platform provides a more engaging and interactive learning experience than traditional methods, which helps students learn and retain skills better. Try the free version and see for yourself.

Bloom's Taxonomy

Bloom's Taxonomy is a system for categorizing distinct stages of intellectual growth. It is used in education to assist students comprehend and learn material more effectively. MCSI teaches students how to apply, analyze, evaluate, and create at the highest levels of the taxonomy. The majority of our competitors are simply concerned with getting you to remember concepts.

The intellectual developments outlined in Bloom's Taxonomy are directly tied to your capacity to advance in your cyber security career. Employers look for people who can solve challenges that are worth paying for. With us, you'll learn practical skills that are in demand and applicable to a wide range of cyber occupations.

Industry Recognized Skills

MCSI credentials are well-respected around the world, and organisations searching for people with real cyber security abilities seek them out. Obtaining an MCSI certification verifies your understanding of critical cyber security topics as well as your ability to provide real-world results.

The ability of MCSI's training programme to give students with real-world, hands-on experience is unrivalled. Students must conduct their own research and develop their own answers in order to complete our practical exercises, which are meant to give them the skills they need to be successful in the field.

With MCSI, you will build a comprehensive cybersecurity portfolio of your skills as you complete exercises. This portfolio is a powerful tool for displaying your cybersecurity knowledge and abilities. A portfolio, as opposed to typical resumes and paper-based credentials, presents a more thorough summary of your skills and accomplishments.

Students Feedback

Here's what students say about the MCSI Method™ and our Online Learning Platform:

Student Testimonials

Information Security Professionals made a median salary of $103,590 in 2020. Cybersecurity roles are regularly ranked #1 jobs in the United States.

If you're interested in increasing your earning potential, investing in this course will give you the skills and confidence you need to apply for jobs that offer a salary of $75,000 to $150,000 per year. Why spend tens of thousands of dollars on degrees or theoretical certifications when you can develop in-demand practical skills in a shorter amount of time?

Frequently Asked Questions

What is the MCSI Method™?

Common Questions

  • Are solutions included in certifications and bundles?
    • No. Our method of teaching cyber security consists of challenging you with real-world problem statements that you're expected to research and solve by doing your own research. This is how you'll be expected to work in the field. When you fail an exercise, we provide you with constructive feedback to improve and try again.
  • Do the videos provides the answers to exercises?
    • No. The videos teach concepts, mindset, methodologies, procedures and professional skills such as report writing, interviewing and preparing proposals.
  • Do bundles, training content, or certificates ever expire? Am I expected to buy again in the future?
    • Upon purchase, bundles and certificates are permanently unlocked with no recurring or ongoing fees.
  • Do I need to buy the training and the certification separately?
    • No. The price provided covers both. You only pay once.
  • Do you offer any special offers and discounts?
    • We understand that many of our customers may be looking for discounts, and we would love to be able to offer them. However, we do not provide discounts because we believe that our prices are fair and reasonable. We work hard to keep our prices low, and we feel that discounts would be unfair to our other customers. We hope you understand.
  • If I can't solve the exercise where do I go for help?
  • Who reviews and marks exercises?
    • Trained cyber security instructors that work for Mossé Cyber Security Institute.
    • MCSI instructors are highly qualified and experienced professionals who are able to teach a variety of topics related to information security. They have the ability to tailor their teaching methods to meet the needs of each student, regardless of their experience level. In addition, they are always up-to-date on the latest trends and developments in information security, which enables them to provide students with the most relevant and current information.
  • We can't pay via credit card. Can you raise an invoice for international wire payment instead?
    • Yes. Send us the list of bundles and certifications you want to purchase at [email protected]
  • Can I access a trial/demo the certification programmes prior to enrolling?
    • We provide a free curriculum with 82 practical exercises you can try.
    • The Free Curriculum teaches Security Tools, Penetration Testing, Red Teaming, Threat Hunting, Cyber Defence, GRC and Windows Internals.
    • Try the Free Curriculum
  • What is an `Unofficial Curriculum`?
    • An `Unofficial Curriculum` contains MCSI's practical exercises aligned to a non-MCSI Industry Certification syllabus.
    • We offer unofficial curriculums for the OSCP, ISACA CISA, ISACA CISM, ISACA CRISC, CCT ICE, CCSAS, CCT ACE.
  • Do you provide Continuing Professional Education (CPE) credits?
    • Yes. Every single exercise offers CPE credits. The number of credits earned depends on the difficulty of the exercise completed. Below are the CPE Credits achieve for an exercise in each difficulty:
    • Novice exercises = 1 CPE credits
    • Advanced Beginner exercises = 2 CPE credits
    • Competent exercises = 5 CPE credits
    • Proficient exercises= 8 CPE credits
    • Beyond Proficient exercises = 16 CPE credits
  • Do I need to complete an exam to receive MCSI Certification?
    • No. MCSI Certifications are completed by solving practical cybersecurity exercises.
  • Do I need to purchase cybersecurity tools or subscriptions?
    • No. Only free or trial versions are used in our exercises. You do not require making any purchases.

DO YOU HAVE A QUESTION?

We'll respond within 24 hours

Visit our Frequently Asked Questions (FAQ) page for answers to the most common questions we receive.

Ready to learn hands-on cyber security skills online?

Register Now