Core Focus: Evaluates comprehensive, hands-on penetration testing and ethical hacking skills at an intermediate level.

Key Competencies: Candidates learn to assess complex infrastructure risk and compose commercial-grade, actionable security reports.

Core Focus: Measures proficiency in professional bug bounty hunting and web application penetration testing.

Key Competencies: Validates intermediate technical competence to evaluate security risks in web applications, API architectures, and backend services.

Core Focus: Advanced-level certification centering on advanced web application vulnerability identification and risk mitigation.

Key Competencies: Focuses on modern exploit mechanics, helping students identify deeply hidden flaws using custom advanced attack principles.

Core Focus: High-level practical certification assessing your ability to find and exploit vulnerabilities in complex Active Directory (AD) environments.

Key Competencies: Focuses on abusing Windows protocols (such as Kerberos and NTLM) and misconfigurations across AD components like ADCS, WSUS, Exchange, and Domain Trusts. Includes using Linux or Windows to execute Command and Control (C2) frameworks for post-exploitation.

Core Focus: Evaluates expert-level, hands-on proficiency in real-world wireless network exploitation, assessing the ability to compromise environments across all major protocols, including WPA3 and WPA-Enterprise.

Key Competencies: Validates advanced skills in deploying rogue access points, executing Evil Twin and MITM attacks, bypassing captive portals, and harvesting credentials. Candidates demonstrate mastery of industry-standard tools (such as Aircrack-ng, Airgeddon, Bettercap, and Kismet) and the critical ability to pivot from a wireless compromise to gain an initial Active Directory foothold in internal enterprise networks.

Core Focus: Evaluates technical competence in defensive security analysis, Security Operations Center (SOC) operations, and incident handling.

Key Competencies: Teaches students to identify live security incidents, recognize hidden evasion tactics, and produce effective security incident reports.

Core Focus: Entry-level foundational exam assessing baseline cybersecurity assessment skills across both offensive and defensive fields.

Key Competencies: Validates core abilities to spot common security gaps, perform basic post-exploitation, run SIEM-assisted monitoring, analyze network logs, and intercept network intrusions.

Core Focus: Cutting-edge certification covering adversarial attacks against artificial intelligence and machine learning infrastructure.

Key Competencies: Goes far beyond basic prompt injection to cover adversarial ML, data poisoning, evasion attacks, LLM output exploitation, and AI privacy breaches using live, realistic target environments.

Access the Exam Dashboard: Navigate to the Certificates page.

Select Your Certification Target: Locate your specific unlocked track card (such as Penetration Testing for the HTB CPTS) and click on your target exam tile. The tile will show an 'Exam ready to take' message.

Initialize the Verification Modal: Click the green button labeled Start Exam. A mandatory confirmation dialog box will pop up stating that triggering this action instantly consumes one exam attempt.

Understand Your Timeline Constraints: Depending on your specific track tier, your lab environment access and report submission window vary. When you enter the exam, you will see the message "By entering the exam, one (1) attempt will be consumed. You will have X days to complete the exam and upload the report." Please keep in mind the lab deadline and don't forget to submit the exam report.

Connection Rules (Strict Single-Route Policy): You can interact with your target environment via two separate connection models: downloading a local VPN configuration pack to use with your virtual machine or spawning an in-browser Pwnbox instance.

Avoid Connection Routing Drops: You must use only one connection route at a time. Attempting to connect via a local OpenVPN configuration package while simultaneously running an active browser Pwnbox will drop your active sessions.

Selecting Your Infrastructure Regional Location: Locate the connection widget box, select your preferred geographic region from the dropdown menu, and choose your VPN server.

Spawning the Environment: Click the green button labeled Start Pwnbox to boot your virtual system.

Lifespan Constraints: An active browser instance stays online for a maximum continuous duration of 4 days. This instance's runtime cannot be extended with custom timer additions. Once the 4-day mark hits, the system automatically wipes the current container environment. To continue working, you must deploy a fresh instance from the target system dashboard.

Reach the Minimum Point Threshold: You must collect target system flags to meet the specific point requirements of your exam (for instance, scoring at least 70 out of 100 points on intermediate paths).

Submit Professional Documentation: You must compile a detailed, commercial-grade penetration testing report in English that clearly maps out your attack methodology and remediation steps.

CPTS, CWES, CAPE, and CDSA Exam: You must upload your report as an unencrypted PDF document or compressed ZIP archive. The file must not contain any password protection and must have a maximum size limit of 20MB.

CWEE Exam Only: Your report must be formatted as raw Markdown files (.md) packed neatly inside a compressed ZIP archive using the specific password parameters provided during the exam instructions. The file must have a maximum size limit of 20MB.

Global Language Standard: The platform does not accept documentation submissions outside of the official exam web dashboard. Furthermore, all reports must be composed entirely in the English language.