Study guide
PenTest+ study guide
Read a lesson, then practice the ideas you want to remember.
Lessons
- Exploit Selection, Customization, and Attack
- Target Prioritization: CVSS, CVE, CWE, and E
- Breach and Attack Simulation — Free Study Guide 2026
- PowerShell, Python, and Bash Attack Automati
- Pass-the-Hash, Pass-the-Ticket, Pass-the-Tok
- Password Attacks, MFA Fatigue, LDAP Injectio
- Container Escape, Supply Chain, and Cloud At
- IAM Misconfiguration, Metadata Service, and
- Collaboration, Escalation, and Stakeholder C
- Testing Frameworks and Methodologies — Free Study Guide 2026
- Threat Modeling: STRIDE, DREAD, and OCTAVE
- DNS, Directory, Share, and Account Enumerati
- OS Fingerprinting, Service Discovery, and Ho
- Secrets, Permissions, and Wireless Enumerati
- WAF Enumeration, Web Crawling, and Attack Pa
- Cleanup, Restoration, and Artifact Preservat
- Staging and Exfiltration — Free CompTIA PenTest+ Guide 2026
- Process Injection, Security Bypass, and Host
- Privilege Escalation and Credential Dumping
- Active vs Passive Reconnaissance — Free Study Guide 2026
- DNS, Certificate Transparency, and Search En
- Network Recon, Protocol Scanning, Sniffing,
- OSINT Sources and Techniques — Free Study Guide 2026
- Current PT0-003 Exam Facts — Free CompTIA PenTest+ Guide 2026
- Format, PBQs, Scoring, and Retake Policy
- Recertification, CEUs, and Career Fit — Free Study Guide 2026
- Lateral Movement Tools and LOLbins — Free Study Guide 2026
- Pivoting, Relays, and Additional Credential
- Remote Services: SMB, RDP, WinRM, WMI, SSH,
- Default Credentials, Misconfigured Services,
- On-Path, VLAN Hopping, Relay, and Multihomed
- C2, Backdoors, Rootkits, and Security-Contro
- Scheduled Tasks, Services, Accounts, and She
- Scope, Rules of Engagement, and Agreements
- Shared Responsibility, Legal Authorization,
- Target Selection and Assessment Types — Free Study Guide 2026
- Modifying Bash, Python, and PowerShell for R
- Recon and Enumeration Tools — Free CompTIA PenTest+ Guide 2026
- Penetration Test Report Components — Free Study Guide 2026
- Findings Analysis and Remediation Recommenda
- Public Exploit Selection and Scripted Valida
- Physical Security Concepts for PenTests
- Specialized Discovery Tools — Free CompTIA PenTest+ Guide 2026
- Validating Scan, Recon, and Enumeration Resu
- Mobile Attacks and AI Prompt/Model Attacks
- OT/ICS, NFC, RFID, and Bluetooth Attacks
- SAST, DAST, IAST, SCA, IaC, and Mobile Scans
- Container, Secrets, and ICS Vulnerability As
- Network, Host, Authenticated, and Wireless S
- Core Vulnerability Scanners — Free CompTIA PenTest+ Guide 2026
- CSRF, SSRF, Deserialization, IDOR, and Direc
- LFI/RFI, Web Shells, API Abuse, JWT, and Ses
- SQL, Command, XSS, and SSTI Injection — Free Study Guide 2026
- Phishing, Spearphishing, Whaling, Vishing, a
- Physical Social Engineering and SE Tools
- Wireless Attacks and Tools — Free CompTIA PenTest+ Guide 2026