
CompTIA PenTest+ (PT0-003) Complete Certification Course
Did you know the Bureau of Labor Statistics is projecting 32% growth for information security analyst roles through 2032? This includes Penetration Testers. The CompTIA PenTest+ (PT0-003) certification is a pivotal credential for professionals aiming to specialize in penetration testing and vulnerability management. Professionals holding the PenTest+ certification earn an average salary of $110,540, reflecting the high demand and value of this expertise in the cybersecurity field.
What's Included
Who This Course Is For
- IT Professionals aspiring to become penetration testers
- Cybersecurity Analysts and Consultants seeking advanced skills
- Network Administrators responsible for securing systems
- Ethical Hackers preparing for the CompTIA PenTest+ certification
-
Security Engineers and Incident Responders expanding their expertise
What You’ll Learn
This course thoroughly prepares you for the CompTIA PenTest+ (PT0-003) exam by covering all five key domains:
- Planning and Scoping
- Information Gathering and Vulnerability Identification
- Attacks and Exploits
- Reporting and Communication
- Tools and Code Analysis
Course Curriculum
1 - Introduction Preview
- 1. Introduction 12m:23sVideo
- 2. Download your free study guide PDF
- 3. Exam Tips 4m:14sVideo
- 4. How to Use the Lab Environment 5m:27sVideo
- 5. Labs: Exploring the PenTest+ Lab Environment Lab
- 6. 100% Pass Guarantee 3m:49sVideo
- 7. Checkpoint: Introduction Quiz
2 - PenTesting Overview
- 1. PenTesting Overview 2m:54sVideo
- 2. Planning the Engagement 4m:23sVideo
- 3. Information Gathering 4m:2sVideo
- 4. Attacks and Exploits 3m:29sVideo
- 5. Post-Exploitation 3m:4sVideo
- 6. Reporting 3m:47sVideo
- 7. Overview of a PenTest 9m:18sVideo
- 8. Checkpoint: PenTesting Overview Quiz
3 - Pre-Engagement Activities
- 1. Pre-Engagement Activities 3m:20sVideo
- 2. Regulations and Standards 6m:24sVideo
- 3. Types of Assessments 4m:32sVideo
- 4. Types of Agreements 4m:17sVideo
- 5. Legal and Ethical Considerations 4m:31sVideo
- 6. Rules of Engagement 4m:48sVideo
- 7. Target Selection 4m:54sVideo
- 8. Shared Responsibility Model 4m:23sVideo
- 9. Preparing to PenTest a Cloud Provider 4m:13sVideo
- 10. Checkpoint: Pre-Engagement Activities Quiz
4 - Frameworks
- 1. Frameworks 3m:43sVideo
- 2. MITRE ATT&CK 4m:54sVideo
- 3. OWASP 4m:55sVideo
- 4. MASVS 4m:14sVideo
- 5. PTES 5m:22sVideo
- 6. CREST 3m:54sVideo
- 7. OSSTMM 3m:8sVideo
- 8. STRIDE 5m:41sVideo
- 9. Purdue Model 3m:55sVideo
- 10. OCTAVE 6m:53sVideo
- 11. DREAD 5m:9sVideo
- 12. Using the MITRE ATT&CK Framework 4m:33sVideo
- 13. Checkpoint: Frameworks Quiz
5 - Information Gathering
- 1. Information Gathering 3m:9sVideo
- 2. Passive Reconnaissance 3m:30sVideo
- 3. Network Sniffing 5m:10sVideo
- 4. Active Reconnaissance 3m:47sVideo
- 5. Port and Protocol Scanning 5m:51sVideo
- 6. HTML Scraping and Cached Pages 2m:59sVideo
- 7. Banner Grabbing 5m:2sVideo
- 8. Conducting Banner Grabbing 3m:45sVideo
- 9. Checkpoint: Information Gathering Quiz
6 - Open-Source Intelligence (OSINT)
- 1. Open-Source Intelligence (OSINT) 2m:48sVideo
- 2. Social Media and Job Boards 4m:45sVideo
- 3. Information Disclosures 4m:8sVideo
- 4. Cryptographic Flaws 6m:31sVideo
- 5. DNS Lookups 7m:40sVideo
- 6. Certificate Transparency Logs 4m:50sVideo
- 7. Search Engine Analysis 4m:27sVideo
- 8. Conducting OSINT 10m:35sVideo
- 9. Checkpoint: Open-Source Intelligence (OSINT) Quiz
7 - Scanning and Enumeration
- 1. Scanning and Enumeration 3m:56sVideo
- 2. OS and Service Discovery 14m:58sVideo
- 3. Enumerating Protocols 4m:52sVideo
- 4. Enumerating DNS 3m:56sVideo
- 5. Enumerating Directories 5m:1sVideo
- 6. Enumerating Hosts 6m:44sVideo
- 7. Enumerating Users 2m:45sVideo
- 8. Enumerating Email 3m:17sVideo
- 9. Enumerating Permissions 4m:57sVideo
- 10. Enumerating Wireless Devices 4m:27sVideo
- 11. Enumerating Secrets 4m:53sVideo
- 12. Enumerating the Web 4m:38sVideo
- 13. Attack Path Mapping 3m:22sVideo
- 14. Checkpoint: Scanning and Enumeration Quiz
8 - Recon and Enumeration Tools
- 1. Reconnaissance and Enumeration Tools 3m:36sVideo
- 2. Wayback Machine 2m:46sVideo
- 3. theHarvester and Hunter.io 4m:54sVideo
- 4. OSINT Tools 4m:5sVideo
- 5. Whois and recon-ng 20m:32sVideo
- 6. nslookup and dig 6m:58sVideo
- 7. DNSdumpster and Amass 6m:30sVideo
- 8. Shodan and Censys.io 5m:42sVideo
- 9. tcpdump 5m:31sVideo
- 10. Wireshark 5m:42sVideo
- 11. Wireless Analysis Tools 5m:12sVideo
- 12. Checkpoint: Recon and Enumeration Tools Quiz
9 - Nmap and NSE
- 1. Nmap and NSE 2m:34sVideo
- 2. Nmap Discovery Scans 7m:54sVideo
- 3. Nmap Port Scans 9m:13sVideo
- 4. Nmap Fingerprinting 4m:13sVideo
- 5. Using Nmap 11m:31sVideo
- 6. Nmap Scripting Engine 7m:0sVideo
- 7. Checkpoint: Nmap and NSE Quiz
10 - Scripting Basics
- 1. Scripting Basics 2m:11sVideo
- 2. Shells and Programming Languages 9m:48sVideo
- 3. Variables 7m:52sVideo
- 4. Loops 5m:20sVideo
- 5. Logic Control 4m:33sVideo
- 6. Data Structures 12m:37sVideo
- 7. Object Oriented Programming 6m:58sVideo
- 8. Checkpoint: Scripting Basics Quiz
11 - Modifying Scripts
- 1. Modifying Scripts 2m:55sVideo
- 2. Bash Fundamentals 21m:16sVideo
- 3. Understanding a Bash Script 4m:31sVideo
- 4. Modifying a Bash Script 8m:44sVideo
- 5. PowerShell Fundamentals 15m:41sVideo
- 6. Understanding a PowerShell Script 3m:20sVideo
- 7. Modifying a PowerShell Script 7m:42sVideo
- 8. Python Fundamentals 20m:27sVideo
- 9. Understanding a Python Script 3m:35sVideo
- 10. Modifying a Python Script 5m:33sVideo
- 11. Checkpoint: Modifying Scripts Quiz
12 - Analyzing Scans
- 1. Analyzing Scans 3m:11sVideo
- 2. Positive and Negative Results 4m:12sVideo
- 3. Validating Scan Results 3m:56sVideo
- 4. Using CVEs and CVSS 6m:16sVideo
- 5. Exploit Prediction Scoring System 3m:44sVideo
- 6. Target Prioritization 3m:50sVideo
- 7. Common Target Criteria 4m:3sVideo
- 8. Scripting for Result Validation 3m:1sVideo
- 9. Scan Validations 3m:38sVideo
- 10. Capability Selection 4m:30sVideo
- 11. Documenting the Attack 6m:12sVideo
- 12. Other Attack Considerations 4m:25sVideo
- 13. Checkpoint: Analyzing Scans Quiz
13 - Discovering Vulnerabilities
- 1. Discovering Vulnerabilities 2m:14sVideo
- 2. Application Scanning 4m:55sVideo
- 3. Software Analysis 5m:54sVideo
- 4. Host-Based Scanning 4m:25sVideo
- 5. Network Scanning 5m:3sVideo
- 6. Mobile Scanning 3m:17sVideo
- 7. Container Scanning 5m:11sVideo
- 8. Scanning IaC 5m:34sVideo
- 9. ICS Vulnerability Discovery 5m:21sVideo
- 10. Wireless Scans 4m:56sVideo
- 11. Static Code Analysis (SonarQube) 5m:49sVideo
- 12. Checkpoint: Discovering Vulnerabilities Quiz
14 - Vulnerability Discovery Tools
- 1. Vulnerability Discovery Tools 2m:12sVideo
- 2. Nikto 5m:16sVideo
- 3. Greenbone/OpenVAS 13m:32sVideo
- 4. Trivy 3m:44sVideo
- 5. BloodHound 6m:6sVideo
- 6. PowerSploit 1m:30sVideo
- 7. Grype 3m:13sVideo
- 8. Kube-Hunter 3m:10sVideo
- 9. TruffleHog 3m:25sVideo
- 10. Checkpoint: Vulnerability Discovery Tools Quiz
15 - Social Engineering Attacks
- 1. Social Engineering Attacks 3m:15sVideo
- 2. Methods of Influence 11m:2sVideo
- 3. Phishing Campaigns 4m:35sVideo
- 4. Using the Social Engineering Toolkit (SET) 13m:38sVideo
- 5. Gophish 6m:12sVideo
- 6. Impersonation 4m:17sVideo
- 7. Surveillance Techniques 2m:45sVideo
- 8. Watering Hole 3m:2sVideo
- 9. Evilginx 5m:35sVideo
- 10. Tailgating and Piggybacking 3m:40sVideo
- 11. Browser Exploitation Framework (BeEF) 3m:4sVideo
- 12. Checkpoint: Social Engineering Attacks Quiz
16 - Wireless Attacks
- 1. Wireless Attacks 2m:38sVideo
- 2. Wireless Security 16m:26sVideo
- 3. Wireless Signal Exploitation 4m:1sVideo
- 4. Aircrack-ng 4m:54sVideo
- 5. Wireless Hacking 8m:34sVideo
- 6. WPS PIN Attacks 11m:37sVideo
- 7. Captive Portal Attacks 4m:28sVideo
- 8. Evil Twin 2m:59sVideo
- 9. Kismet 3m:51sVideo
- 10. Wi-Fi Protocol Fuzzing 4m:21sVideo
- 11. Checkpoint: Wireless Attacks Quiz
17 - Network Attacks
- 1. Network Attacks 3m:51sVideo
- 2. Stress Testing 6m:22sVideo
- 3. Bypassing Segmentation 5m:21sVideo
- 4. MAC Spoofing 5m:12sVideo
- 5. NAC Bypass 4m:42sVideo
- 6. Session-Based Attacks 3m:51sVideo
- 7. Service Exploitation 5m:25sVideo
- 8. Packet Crafting 4m:24sVideo
- 9. Netcat 7m:36sVideo
- 10. Using Netcat 10m:59sVideo
- 11. Default Network Credentials 5m:2sVideo
- 12. LLMNR/NBT-NS Poisoning 4m:43sVideo
- 13. ARP Poisoning 7m:5sVideo
- 14. Intro to Metasploit 5m:29sVideo
- 15. Checkpoint: Network Attacks Quiz
18 - Authentication Attacks
- 1. Authentication Attacks 3m:24sVideo
- 2. Types of Password Attack 4m:3sVideo
- 3. Password Cracking Tools 7m:54sVideo
- 4. Credential Attacks 7m:10sVideo
- 5. Credential Passing Attacks 5m:9sVideo
- 6. Directory Service Attacks 4m:16sVideo
- 7. CrackMapExec (CME) 2m:8sVideo
- 8. SAML Attacks 5m:27sVideo
- 9. OpenID Connect (OIDC) Attacks 5m:42sVideo
- 10. Hash Attacks 4m:3sVideo
- 11. Checkpoint: Authentication Attacks Quiz
19 - Host Attacks
- 1. Host Attacks 3m:16sVideo
- 2. Privilege Escalation 6m:31sVideo
- 3. Conducting Privilege Escalation 13m:6sVideo
- 4. Credential Harvesting 3m:55sVideo
- 5. Misconfigured Endpoints 3m:34sVideo
- 6. Unquoted Service Paths 4m:25sVideo
- 7. Disabling Security Software 6m:19sVideo
- 8. Payload Obfuscation 4m:27sVideo
- 9. User-Controlled Access Bypass 7m:2sVideo
- 10. Shell and Kiosk Escapes 3m:58sVideo
- 11. Library and Process Injection 6m:57sVideo
- 12. Log Tampering 3m:3sVideo
- 13. Living Off the Land 3m:28sVideo
- 14. Checkpoint: Host Attacks Quiz
20 - Web Application Vulnerabilities
- 1. Web Application Vulnerabilities 2m:51sVideo
- 2. Race Conditions 4m:53sVideo
- 3. Buffer Overflows 12m:26sVideo
- 4. Buffer Overflow Attacks 6m:13sVideo
- 5. Authentication Flaws and Insecure References 5m:53sVideo
- 6. Improper Error Handling 5m:13sVideo
- 7. Improper Headers 6m:8sVideo
- 8. Code Signing 1m:58sVideo
- 9. Vulnerable Components 11m:41sVideo
- 10. Software Composition 9m:46sVideo
- 11. Checkpoint: Web Application Vulnerabilities Quiz
21 - Web Application Attacks
- 1. Web Application Attacks 3m:20sVideo
- 2. Directory Traversals 9m:32sVideo
- 3. Directory Traversal Tools 10m:32sVideo
- 4. Cross-Site Scripting (XSS) 8m:56sVideo
- 5. Request Forgeries 4m:5sVideo
- 6. SQL Injections 7m:0sVideo
- 7. Performing SQL Injection Attacks 8m:27sVideo
- 8. Injection Attacks 5m:21sVideo
- 9. File Inclusions 3m:52sVideo
- 10. Arbitrary Code Execution 4m:20sVideo
- 11. Web Application Session Hijacking 5m:39sVideo
- 12. Abusing APIs 7m:17sVideo
- 13. OWASP ZAP 5m:7sVideo
- 14. Attacking Web Applications 15m:36sVideo
- 15. Checkpoint: Web Application Attacks Quiz
22 - Cloud Attacks
- 1. Cloud Attacks 2m:53sVideo
- 2. Identity and Access Management (IAM) Misconfigurations 4m:13sVideo
- 3. Resource Misconfigurations 4m:33sVideo
- 4. Logging Information Exposures 4m:32sVideo
- 5. Metadata Service Attacks 6m:27sVideo
- 6. Image and Artifact Tampering 5m:59sVideo
- 7. Supply Chain Attacks 4m:54sVideo
- 8. Container Exploits and Attacks 3m:46sVideo
- 9. Trust Relationship Abuse 6m:38sVideo
- 10. Third-party Integration Exploits 5m:12sVideo
- 11. Cloud Security Testing 6m:11sVideo
- 12. Conducting Cloud Audits 13m:58sVideo
- 13. Checkpoint: Cloud Attacks Quiz
23 - Attacking Specialized Systems
- 1. Attacking Specialized Systems 2m:46sVideo
- 2. Mobile Device Attacks 12m:15sVideo
- 3. Tools for Mobile Device Attacks 5m:8sVideo
- 4. Bluetooth Attacks 3m:9sVideo
- 5. NFC and RFID Attacks 4m:46sVideo
- 6. AI Attacks 4m:35sVideo
- 7. Operational Technology (OT) 9m:14sVideo
- 8. OT Attacks 10m:50sVideo
- 9. Testing OT Systems 3m:37sVideo
- 10. Checkpoint: Attacking Specialized Systems Quiz
24 - Automated Attacks
- 1. Automated Attacks 2m:58sVideo
- 2. Automating Attacks with Bash 3m:41sVideo
- 3. Empire/PowerSploit 4m:47sVideo
- 4. PowerView 4m:29sVideo
- 5. PowerUpSQL 5m:47sVideo
- 6. AD Search 5m:34sVideo
- 7. Impacket 3m:8sVideo
- 8. Scapy 6m:49sVideo
- 9. Caldera 4m:8sVideo
- 10. Infection Monkey 3m:9sVideo
- 11. Atomic Red Team 4m:10sVideo
- 12. Checkpoint: Automated Attacks Quiz
25 - Persistence
- 1. Persistence 2m:37sVideo
- 2. Command and Control 3m:41sVideo
- 3. Automating Persistence 5m:6sVideo
- 4. Remote Shells 4m:8sVideo
- 5. Using Remote Shells 4m:55sVideo
- 6. Backdoor 5m:53sVideo
- 7. Remote Access Trojans 5m:45sVideo
- 8. Account Credentials 5m:32sVideo
- 9. Browser-Based Persistence 5m:16sVideo
- 10. Security Control Tampering 6m:53sVideo
- 11. Checkpoint: Persistence Quiz
26 - Lateral Movement
- 1. Lateral Movement 3m:4sVideo
- 2. Pivoting and Relaying 3m:5sVideo
- 3. Using ProxyChains 7m:43sVideo
- 4. Enumerating for Lateral Movement 3m:21sVideo
- 5. Service Discovery 5m:41sVideo
- 6. Protocol Discovery 3m:0sVideo
- 7. Remote Access Discovery 4m:27sVideo
- 8. Printer Discovery 4m:19sVideo
- 9. Discovering Internal Websites 8m:26sVideo
- 10. Living Off the Land Tools 4m:30sVideo
- 11. sshuttle 4m:39sVideo
- 12. Covenant 5m:7sVideo
- 13. Checkpoint: Lateral Movement Quiz
27 - Exfiltration
- 1. Exfiltration 2m:33sVideo
- 2. Covert Channels 4m:4sVideo
- 3. Steganography 5m:46sVideo
- 4. Covert Channel Using DNS 7m:39sVideo
- 5. Covert Channel Using ICMP 3m:34sVideo
- 6. Covert Channel Using HTTPS 4m:42sVideo
- 7. Alternate Data Streams (ADS) 3m:50sVideo
- 8. Exfiltrating Data 4m:15sVideo
- 9. Checkpoint: Exfiltration Quiz
28 - Cleanup and Restoration
- 1. Cleanup and Restoration 2m:6sVideo
- 2. Persistence Removal 3m:20sVideo
- 3. Revert Configuration Changes 3m:23sVideo
- 4. Created Credentials Removal 2m:32sVideo
- 5. Removal of Testing Tools 2m:25sVideo
- 6. Decommission Testing Infrastructure 3m:9sVideo
- 7. Artifact Preservation 2m:38sVideo
- 8. Secure Data Destruction 2m:34sVideo
- 9. Checkpoint: Cleanup and Restoration Quiz
29 - Remediation Recommendations
- 1. Remediation Recommendations 2m:27sVideo
- 2. System Hardening 10m:50sVideo
- 3. User Input Sanitization 4m:42sVideo
- 4. Network and Infrastructure Controls 3m:55sVideo
- 5. Authentication Recommendations 4m:27sVideo
- 6. Encryption Recommendations 4m:45sVideo
- 7. Patch Management 3m:51sVideo
- 8. Process Level Remediation 2m:57sVideo
- 9. Administrative Controls 14m:20sVideo
- 10. Physical Controls 6m:55sVideo
- 11. Operational Controls and Policies 2m:55sVideo
- 12. Implementing Recommendations 8m:50sVideo
- 13. Checkpoint: Remediation Recommendations Quiz
30 - Penetration Test Reporting
- 1. Penetration Test Reporting 2m:30sVideo
- 2. Executive Summary Process 2m:57sVideo
- 3. Root Cause Analysis 4m:24sVideo
- 4. Report Components 4m:25sVideo
- 5. Risk Scoring and Prioritization 3m:39sVideo
- 6. Definitions in the Report 3m:37sVideo
- 7. Limits and Assumptions 4m:23sVideo
- 8. Special Considerations 5m:37sVideo
- 9. Report Analysis Workshop 7m:3sVideo
- 10. Checkpoint: Penetration Test Reporting Quiz
31 - Conclusion
- 1. Conclusion 12m:47sVideo
- 2. BONUS: What comes next? 3m:44sVideo
- 3. Practice Exam Exam