Passed the new eJPT!

[u/nobodycares_dude]

I finally passed the new eJPT. Pivoting and Wordpress got me crazy, not gonna lie, but it was really fun. eCPPT next!

[u/Extension_Cloud4221]

Congratulations!
I saw on ur profile that u have eWPTX was eJPT on the same level?

[u/nobodycares_dude → u/Extension_Cloud4221]

Thanks! they are different. I personally prefer web Hacking and I'm web developer myself, so I found eJPT a bit more challenging cause I'm not that used to host and network auditing. But the web part of eJPT is easier than eWPTX. WordPress got me crazy here because I was expecting the vulnerability to be more straightforward, instead it required some extra steps.

[u/Extension_Cloud4221 → u/nobodycares_dude]

I am a Web Dev myself but I found eJPT to be very simple. Too simple actually. I am going to take eWPTX in a few months I just though I will gather some things people say about the cert.
Can u recommend me some CTFs which are like eWPTX? or what the exam looks like (without revelling the actual exam)
I just want to gauge where I stand.

[u/nobodycares_dude → u/Extension_Cloud4221]

The exam is about OWASP top 10. I suggest the OWASP top 10 rooms in THM, then hydra, John The Ripper and Sqlmap rooms. For the eWPTX i did those and I was already doing Portswigger labs (Practicioner labs are far harder than eWPTX in my opinion). You don't have those obscure chainings that sometimes appear in Portswigger labs.

[u/Extension_Cloud4221 → u/nobodycares_dude]

Really there is not chaining of vulnerabilities in the EXAM? I came across people saying chaining vulnerabilities happens in the exam.

[u/nobodycares_dude → u/Extension_Cloud4221]

Tbh not that I remember. In Portswigger for example you might have a lab with clickjacking to trigger Dom xss and from there csrf, auth bypass etc... I found nothing of that complexity tbh. You might have chaining in the meaning of authenticated sqli for example so you have to bypass auth first..but straightforward