Study guide

PenTest+ study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Exploit Selection, Customization, and Attack
  2. Target Prioritization: CVSS, CVE, CWE, and E
  3. Breach and Attack Simulation — Free Study Guide 2026
  4. PowerShell, Python, and Bash Attack Automati
  5. Pass-the-Hash, Pass-the-Ticket, Pass-the-Tok
  6. Password Attacks, MFA Fatigue, LDAP Injectio
  7. Container Escape, Supply Chain, and Cloud At
  8. IAM Misconfiguration, Metadata Service, and
  9. Collaboration, Escalation, and Stakeholder C
  10. Testing Frameworks and Methodologies — Free Study Guide 2026
  11. Threat Modeling: STRIDE, DREAD, and OCTAVE
  12. DNS, Directory, Share, and Account Enumerati
  13. OS Fingerprinting, Service Discovery, and Ho
  14. Secrets, Permissions, and Wireless Enumerati
  15. WAF Enumeration, Web Crawling, and Attack Pa
  16. Cleanup, Restoration, and Artifact Preservat
  17. Staging and Exfiltration — Free CompTIA PenTest+ Guide 2026
  18. Process Injection, Security Bypass, and Host
  19. Privilege Escalation and Credential Dumping
  20. Active vs Passive Reconnaissance — Free Study Guide 2026
  21. DNS, Certificate Transparency, and Search En
  22. Network Recon, Protocol Scanning, Sniffing,
  23. OSINT Sources and Techniques — Free Study Guide 2026
  24. Current PT0-003 Exam Facts — Free CompTIA PenTest+ Guide 2026
  25. Format, PBQs, Scoring, and Retake Policy
  26. Recertification, CEUs, and Career Fit — Free Study Guide 2026
  27. Lateral Movement Tools and LOLbins — Free Study Guide 2026
  28. Pivoting, Relays, and Additional Credential
  29. Remote Services: SMB, RDP, WinRM, WMI, SSH,
  30. Default Credentials, Misconfigured Services,
  31. On-Path, VLAN Hopping, Relay, and Multihomed
  32. C2, Backdoors, Rootkits, and Security-Contro
  33. Scheduled Tasks, Services, Accounts, and She
  34. Scope, Rules of Engagement, and Agreements
  35. Shared Responsibility, Legal Authorization,
  36. Target Selection and Assessment Types — Free Study Guide 2026
  37. Modifying Bash, Python, and PowerShell for R
  38. Recon and Enumeration Tools — Free CompTIA PenTest+ Guide 2026
  39. Penetration Test Report Components — Free Study Guide 2026
  40. Findings Analysis and Remediation Recommenda
  41. Public Exploit Selection and Scripted Valida
  42. Physical Security Concepts for PenTests
  43. Specialized Discovery Tools — Free CompTIA PenTest+ Guide 2026
  44. Validating Scan, Recon, and Enumeration Resu
  45. Mobile Attacks and AI Prompt/Model Attacks
  46. OT/ICS, NFC, RFID, and Bluetooth Attacks
  47. SAST, DAST, IAST, SCA, IaC, and Mobile Scans
  48. Container, Secrets, and ICS Vulnerability As
  49. Network, Host, Authenticated, and Wireless S
  50. Core Vulnerability Scanners — Free CompTIA PenTest+ Guide 2026
  51. CSRF, SSRF, Deserialization, IDOR, and Direc
  52. LFI/RFI, Web Shells, API Abuse, JWT, and Ses
  53. SQL, Command, XSS, and SSTI Injection — Free Study Guide 2026
  54. Phishing, Spearphishing, Whaling, Vishing, a
  55. Physical Social Engineering and SE Tools
  56. Wireless Attacks and Tools — Free CompTIA PenTest+ Guide 2026