Skip to main content
Eren GözaydınOffensive Security & Advisory

Verified Credential Portfolio (12 Certifications)

Exam-Validated Offensive & Executive Security Credentials

Filter all twelve credentials by security discipline below. Each record documents the issuing authority, historical issuer transitions where applicable, practical examination format, represented skills, and consulting service alignment.

Showing 12 certifications for category All.

LPT (Master)

EC-Council

Issued: December 2022Mastery / Elite Practitioner

Licensed Penetration Tester (Master)

EC-Council's highest practical penetration testing designation, awarded for achieving a mastery-level score (90%+) on the 24-hour live multi-network cyber range examination.

Examination & Evaluation Format

24-hour hands-on live cyber range performance exam requiring ≥90% score across segmented enterprise networks plus a formal executive/technical penetration test report.

Skills & Technical Domains Represented

  • Multi-hop network pivoting & double-pivoting
  • Segmented enterprise network compromise
  • Active Directory & Windows exploitation
  • Linux privilege escalation & binary analysis
  • OT/IoT & web application exploitation
  • Executive-grade penetration test reporting

Verified via EC-Council ASPEN (Issued 12/2022) under the live CPENT/LPT Master ≥90% practical performance standard.

Verify Official Credential BadgeIssuer Documentation
CPENT

EC-Council

Issued: December 2022Advanced Professional

Certified Penetration Testing Professional

Advanced, 100% practical certification validating penetration testing across complex, defense-in-depth enterprise networks, Active Directory zones, and segmented architectures.

Examination & Evaluation Format

24-hour live cyber range practical exam accompanied by a comprehensive professional assessment report.

Skills & Technical Domains Represented

  • Active Directory domain exploitation
  • Network segmentation bypass & pivoting
  • Host privilege escalation (Windows & Linux)
  • Vulnerability chaining across zones
  • Technical reporting & remediation specification

Verified via EC-Council ASPEN (Issued 12/2022). Represents the classic live cyber-range curriculum prior to later AI-branded syllabus updates.

Verify Official Credential BadgeIssuer Documentation
eWPTX

INE Security

Historically earned via eLearnSecurity

Issued: June 2022Advanced / Extreme Specialist

eLearnSecurity Web Application Penetration Tester eXtreme

Advanced manual web and API exploitation certification covering filter/WAF evasion, complex server-side vulnerabilities, insecure deserialization, and authentication attacks.

Examination & Evaluation Format

Multi-day hands-on lab engagement requiring manual exploitation of hardened web applications and submission of a commercial-grade penetration testing report.

Skills & Technical Domains Represented

  • Advanced SQL injection & WAF/filter evasion
  • Insecure deserialization & SSRF exploitation
  • XML External Entity (XXE) & out-of-band exfiltration
  • SSO, OAuth 2.0, JWT & SAML authentication attacks
  • Advanced XSS, DOM manipulation & custom exploit scripting

Verified via eLearnSecurity Certificate UUID 969e4b96-6867-45c9-ac12-93a1dbd91cb4 (Issued 06/2022 under the multi-day report-based eWPTXv2 exam standard).

Verify Official Credential BadgeIssuer Documentation
CMSE

8kSec

Advanced Mobile Specialist

8kSec Certified Mobile Security Engineer

Specialized, hands-on mobile security engineering credential focused on auditing Android and iOS application internals, runtime instrumentation, and mobile security hardening.

Examination & Evaluation Format

Practical scenario-driven mobile application security examination and technical assessment reporting.

Skills & Technical Domains Represented

  • Android & iOS application internals auditing
  • Dynamic runtime instrumentation & method hooking
  • Mobile cryptography, Keychain & Keystore evaluation
  • IPC, deep-link & WebView exploitation
  • OWASP MASVS-aligned mobile security hardening

Issued by specialized mobile security research provider 8kSec. Individual verification details available upon request during engagement scoping.

Verification ID Available Upon Scoping RequestIssuer Documentation
eMAPT

INE Security

Historically earned via eLearnSecurity

Issued: March 2022Professional Specialist

eLearnSecurity Mobile Application Penetration Tester

Practical mobile penetration testing credential validating static binary analysis, runtime manipulation, local storage auditing, and transport security testing on Android and iOS.

Examination & Evaluation Format

Hands-on practical examination requiring reverse engineering and custom proof-of-concept exploitation of vulnerable mobile applications.

Skills & Technical Domains Represented

  • Android APK decompilation & static code analysis
  • iOS binary inspection & runtime manipulation
  • SSL/TLS certificate pinning & root detection bypass
  • Insecure local data storage & IPC vulnerability testing
  • Mobile backend API security validation

Earned March 2022 (03/2022) through eLearnSecurity (now INE Security) under its practical mobile exploitation exam model.

Verification ID Available Upon Scoping RequestIssuer Documentation
CRTP

Altered Security

Historically earned via Pentester Academy

Issued: September 2021Professional Red Team Specialist

Certified Red Team Professional

Hands-on Active Directory red teaming certification validating privilege escalation, Kerberos delegation abuse, and cross-forest lateral movement across defended Windows enterprise environments.

Examination & Evaluation Format

24-hour hands-on lab exam requiring full compromise of a multi-server, multi-domain Active Directory environment, followed by a detailed technical walkthrough report.

Skills & Technical Domains Represented

  • Active Directory enumeration & attack path mapping
  • Kerberoasting, AS-REP Roasting & delegation abuse
  • ACL, GPO & Active Directory Certificate Services (ADCS) abuse
  • Cross-domain & cross-forest trust exploitation
  • Lateral movement & defense-aware execution

Earned in September 2021 (09/2021) when delivered via Pentester Academy; the CRTP curriculum and certification authority are now operated by Altered Security.

Verification ID Available Upon Scoping RequestIssuer Documentation
eCPPTv2

INE Security

Historically earned via eLearnSecurity

Issued: April 2021Professional Practitioner

eLearnSecurity Certified Professional Penetration Tester (v2)

Comprehensive, report-driven network and application penetration testing certification emphasizing multi-subnet pivoting, privilege escalation, and buffer overflow exploitation.

Examination & Evaluation Format

14-day practical engagement (7 days of hands-on multi-subnet corporate network exploitation + 7 days to author a full commercial-grade penetration testing report).

Skills & Technical Domains Represented

  • Multi-subnet internal network pivoting
  • Windows & Linux local privilege escalation
  • x86 stack buffer overflow exploit development
  • Web application & network service exploitation
  • Commercial-grade technical & executive reporting

Earned April 2021 (04/2021) as the classic 14-day manual report-based eCPPTv2 credential (prior to INE's later hybrid eCPPTv3 format).

Verification ID Available Upon Scoping RequestIssuer Documentation
Associate C|CISO

EC-Council

Issued: December 2023Executive Security Governance Track

Associate Certified Chief Information Security Officer

Executive-track security governance credential validating knowledge across governance, risk management, compliance controls, security program operations, and strategic CISO planning.

Examination & Evaluation Format

Comprehensive examination covering EC-Council's five core CISO domains: Governance & Risk, Audit & Controls, Security Program Management, Core Competencies, and Strategic Planning.

Skills & Technical Domains Represented

  • Information Security Governance, Risk & Compliance (GRC)
  • Enterprise security program & control management
  • Technical risk quantification & remediation prioritization
  • Audit alignment & executive stakeholder communication
  • Third-party & vendor security risk governance

Related Consulting Services

Security Architecture & Advisory

Earned December 2023 (12/2023). Explicitly held as the Associate C|CISO designation (distinct from the full C|CISO credential).

Verification ID Available Upon Scoping RequestIssuer Documentation
CBSP

Blockchain Council

Specialized Security Advisory

Certified Blockchain Security Professional

Specialized credential evaluating blockchain infrastructure security, consensus mechanism risk vectors, cryptographic key management, and enterprise Web3 threat modeling.

Examination & Evaluation Format

Assessment covering distributed ledger architecture, consensus attack vectors, node/RPC security, and enterprise mitigation strategies.

Skills & Technical Domains Represented

  • Blockchain infrastructure & node/RPC threat modeling
  • Consensus & network-layer risk analysis
  • Cryptographic key lifecycle & wallet security architecture
  • On-chain / off-chain boundary risk evaluation

Supports Blockchain Security Advisory (infrastructure, threat modeling, key management, and off-chain web/API interfaces); does not represent standalone smart contract source code auditing.

Verification ID Available Upon Scoping RequestIssuer Documentation
CEH (Master)

EC-Council

Issued: December 2021Advanced Practitioner Designation

Certified Ethical Hacker (Master)

Awarded for passing both the ANSI-accredited CEH exam and the 6-hour live CEH Practical cyber range exam—accompanied by a #5 Worldwide ranking on the EC-Council Global Ethical Hacker Leaderboard (January 2022).

Examination & Evaluation Format

Dual requirement combining theoretical mastery (125-question exam) with a 6-hour, 20-challenge proctored live cyber range performance exam.

Skills & Technical Domains Represented

  • End-to-end ethical hacking methodology
  • Live cyber range vulnerability identification & exploitation
  • Network, host & web application attack vectors
  • Cryptography, wireless & defensive countermeasures

Earned December 2021 (12/2021). Ranked #5 Globally on the EC-Council Global Ethical Hacker Leadership list in January 2022.

Verification ID Available Upon Scoping RequestIssuer Documentation
CEH (Practical)

EC-Council

Issued: December 2021Practical Hands-On

Certified Ethical Hacker (Practical)

Six-hour proctored live cyber range examination requiring real-time network interrogation, vulnerability exploitation, privilege escalation, and parameter manipulation.

Examination & Evaluation Format

6-hour live cyber range exam consisting of 20 practical security challenges across Windows and Linux targets.

Skills & Technical Domains Represented

  • Live network reconnaissance & service enumeration
  • Web parameter & SQL injection exploitation
  • System compromise & privilege escalation
  • Credential extraction & traffic analysis

Earned 2021 under EC-Council's 6-hour proctored iLabs live cyber range format.

Verification ID Available Upon Scoping RequestIssuer Documentation
CEH

EC-Council

Issued: 2021Core Professional Baseline

Certified Ethical Hacker

ANSI/ISO/IEC 17024-accredited foundational credential covering structured reconnaissance, vulnerability analysis, system hacking, and application security domains.

Examination & Evaluation Format

4-hour, 125-question proctored examination covering offensive security methodology and defensive controls.

Skills & Technical Domains Represented

  • Five-phase ethical hacking methodology
  • Attack surface reconnaissance & scanning
  • System, network & web vulnerability analysis
  • Security controls & countermeasure fundamentals

Earned 2021 prior to later AI-branded CEH syllabus editions.

Verification ID Available Upon Scoping RequestIssuer Documentation
Engagement Scoping

Discuss Your Security Testing Requirements

Tell me what you need assessed—whether a multi-tenant web application, REST/GraphQL API, Android/iOS mobile build, or internal Active Directory environment. You will deal directly with the senior specialist executing the assessment.

• Direct Senior Execution• Mutual NDA Available• Reproducible PoC Reporting• Post-Remediation Retesting
Discuss Your ProjectView Credentials & Verificationeren@erengozaydin.com