Skip to main content

CompTIA Pentest+ PT0-003

Intermediate30 Hours 24 Minutes92 Lesson Videos150 Test Questions

$449.00

CompTIA PenTest+ PT0-003 training for people who want to plan, run and report on authorised penetration tests. 30 hours 24 minutes of video across 92 lessons, plus 150 practice questions.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Download the course outline (PDF)

This CompTIA PenTest+ PT0-003 course prepares you for the CompTIA PenTest+ certification exam and teaches you how to plan, carry out and report on an authorised penetration test. It suits IT and security staff who already know the basics of networks and security. You get 30 hours 24 minutes of training in 92 lesson videos, with 150 test questions to check your progress.

What you will learn

  • Plan a test, agree its scope and work within the rules of engagement
  • Follow the phases and method of a professional penetration test
  • Gather information on a target and build a profile of it
  • Scan and enumerate hosts and services, then confirm which weaknesses are real
  • Carry out controlled attacks against networks, applications and systems
  • Understand privilege escalation and how attackers chain steps together
  • Move through a network after first access, in a safe and controlled way
  • Write reports that explain risk in plain business terms, not just technical detail

Topics covered in PenTest+ PT0-003

The course follows the five domains in the official CompTIA PT0-003 exam objectives.

  1. Engagement management: scoping, planning, rules of engagement and reporting. You learn to agree what is in and out of bounds before any test starts
  2. Reconnaissance and enumeration: finding and mapping targets and their services, using both public sources and active scanning
  3. Vulnerability discovery and analysis: scanning, checking results by hand and ranking each weakness by risk
  4. Attacks and exploits: testing networks, hosts, web applications, cloud services and other attack surfaces. This is the largest part of the exam
  5. Post-exploitation and lateral movement: keeping access, moving to other systems and cleaning up when the test ends

Throughout the course, the focus stays on safe, legal and authorised testing. You learn to link each technical finding back to a real risk the client can act on.

Who this course is for

  • Security analysts who want to understand how attackers think
  • Network and systems administrators
  • Help desk and IT support professionals moving into security
  • Junior penetration testers
  • Defensive security staff who want to move into offensive roles

Before you start

You should have a basic understanding of networking, operating systems and core security ideas. Holding CompTIA Security+ helps, but it is not required to take this course. CompTIA itself recommends Network+ and Security+ level knowledge, plus hands-on experience, before you sit the exam.

About the PT0-003 exam

PT0-003 is the current exam for the CompTIA PenTest+ certification. CompTIA is a vendor-neutral IT certification body. The exam checks that you can find, exploit, report on and help fix weaknesses across networks, cloud services, web applications, APIs and connected devices. It covers both hands-on testing skills and the planning and reporting work that surrounds a test. Check the CompTIA website for the latest exam details before you book.

Jobs this course supports

  • Penetration tester
  • Security consultant
  • Vulnerability analyst
  • Red team support analyst
  • Security engineer
  • Offensive security associate

Skill level

Intermediate
Duration

30 Hours 24 Minutes
Videos

92 Lesson Videos
Questions

150 Test Questions
Certification

CompTIA PenTest+
Exam code

PT0-003
Certification body

CompTIA
Prerequisites

Basic networking, operating system and security knowledge. Security+ helps but is not required.
Best for

Security analysts, network and systems administrators, IT support staff, junior penetration testers
Topics covered

Engagement management, reconnaissance, enumeration, vulnerability analysis, attacks and exploits, post-exploitation, lateral movement, reporting
Format

Online video lessons, self-paced
Language

English
Closed captions

Yes
Certificate

StemBoss Certificate of Completion

What is inside this course

6 modules and 93 lessons. Here is the full outline.

Module 1 - Engagement Management5 lessons
  1. 1.1 Pre Engagement Activities
  2. 1.2 Collaboration and Communication Activities
  3. 1.3 Testing Frameworks and Methodologies
  4. 1.3.1 Examining MITRE ATT&CK
  5. 1.4 Engagement Management Review
Module 2 - Reconnaissance and Enumeration21 lessons
  1. 2.1 Passive Reconnaissance
  2. 2.1.1 Google Hacking
  3. 2.2 Active Reconnaissance
  4. 2.2.1 Port Scanning and Fingerprinting
  5. 2.2.2 Tracing a Network Path with Traceroute
  6. 2.2.3 Intercepting Data with Wireshark
  7. 2.2.4 Web Scraping
  8. 2.3 Enumeration Techniques
  9. 2.3.1 Directory Enumeration
  10. 2.3.2 Email Enumeration
  11. 2.4 Reconnaissance and Enumeration Scripts
  12. 2.4.1 Using Scripts
  13. 2.5 Reconnaissance and Enumeration Tools
  14. 2.5.1 Perform OSINT with Recon ng
  15. 2.5.2 Adding an API Key to Recon ng
  16. 2.5.3 Discovering IoT with Shodan
  17. 2.5.4 Performing WHOIS Lookups
  18. 2.5.5 Performing DNS Lookups
  19. 2.5.6 Using NMAP Scripts
  20. 2.5.7 Performing OSINT with theHarvester
  21. 2.6 Reconnaissance and Enumeration Review
Module 3 - Vulnerability Discovery and Analysis8 lessons
  1. 3.1 Vulnerability Discovery
  2. 3.1.1 Performing a Vulnerability Scan with OpenVAS
  3. 3.1.2 Performing Static Code Analysis
  4. 3.2 Reconnaissance, Scanning and Enumeration Output Analysis
  5. 3.3 Physical Security
  6. 3.3.1 Cloning an RFID Badge
  7. 3.3.2 Cloning NFC with Flipper Zero
  8. 3.4 Vulnerability Discover and Analysis Review
Module 4 - Attacks and Exploits43 lessons
  1. 4.1 Prioritize and Prepare Attacks
  2. 4.2 Network Attacks
  3. 4.2.1 Performing an On Path Attack
  4. 4.2.2 Executing a Network Attack with Metasploit
  5. 4.2.3 Migrating Meterpreter to Another Process
  6. 4.2.4 Creating a Malware Dropper with Msfvenom
  7. 4.2.5 Using Netcat
  8. 4.2.6 Capturing Files with Wireshark
  9. 4.3 Authentication Attacks
  10. 4.3.1 Brute Forcing with Medusa
  11. 4.3.2 Pass the Hash
  12. 4.3.3 Password Spraying with Hydra
  13. 4.3.4 Pass the Token Attack
  14. 4.3.5 Spoofing Authentication with Responder
  15. 4.3.6 Cracking Linux Passwords with John the Ripper
  16. 4.3.7 Hashcat Password Cracking
  17. 4.4 Host Based Attacks
  18. 4.4.1 Privilege Escalation with Eternal Blue
  19. 4.4.2 Log Tampering
  20. 4.4.3 Pwn a Linux Target from Start to Finish
  21. 4.5 Web Application Attacks
  22. 4.5.1 Performing Directory Traversal
  23. 4.5.2 Grabbing Passwords with SQL Injection
  24. 4.5.3 SQLi on a Live Website Part 1
  25. 4.5.4 SQLi on a Live Website Part 2
  26. 4.5.5 Command Injection
  27. 4.5.6 Injecting an iFrame with Stored XSS
  28. 4.5.7 Busting the DOM
  29. 4.5.8 IDOR Abuse with Burp Suite
  30. 4.5.9 Web Session Hijacking
  31. 4.5.10 Parameter Tampering with Burp Suite
  32. 4.6 Cloud Based Attacks
  33. 4.6.1 Hacking S3 Buckets
  34. 4.7 Wireless Attacks
  35. 4.7.1 WiFi Pumpkin Evil Twin
  36. 4.7.2 WPA2 Crack Attack
  37. 4.8 Social Engineering Attacks
  38. 4.8.1 Phishing for Credentials
  39. 4.8.2 OMG Cable Baiting
  40. 4.9 Specialized System Attacks
  41. 4.9.1 Pwn a Mobile Device
  42. 4.10 Automated Script Attacks
  43. 4.11 Attacks and Exploits Review
Module 5 - Post-exploitation and Lateral Movement11 lessons
  1. 5.1 Establishing and Maintaining Persistence
  2. 5.1.1 Creating a Persistent Netcat Back Door
  3. 5.1.2 Exfiltrating Data with a Scheduled Task
  4. 5.2 Lateral Movement
  5. 5.2.1 Preparing to Pivot
  6. 5.2.2 Lateral Movement through Pivoting
  7. 5.3 Staging and Exfiltration
  8. 5.3.1 Hiding Data with Steganography
  9. 5.3.2 Automatically Exfiltrating Data
  10. 5.4 Cleanup and Restoration
  11. 5.5 Post-Exploitation and Lateral Movement Review
Module 6 - Deliverables5 lessons
  1. 6.1 Penetration Test Report Components
  2. 6.2 Report Findings and Recommendations
  3. 6.2.1 Examining Pentest Reports
  4. 6.3 Deliverables Review
  5. 6.4 Course Conclusion

Your learning path

Where CompTIA Pentest+ PT0-003 fits. Build your skills one step at a time.

Take firstCompTIA Network+ N10-009 Certification Training
You are hereCompTIA Pentest+ PT0-003
Next stepCompTIA SecurityX (CAS-005)

Frequently asked questions

What exam does this PenTest+ course prepare me for?

It prepares you for the CompTIA PenTest+ exam, code PT0-003. The lessons follow the five domains in CompTIA's official exam objectives.

What are the five PT0-003 exam domains?

Engagement management, reconnaissance and enumeration, vulnerability discovery and analysis, attacks and exploits, and post-exploitation and lateral movement.

Do I need Security+ before taking this course?

No. Security+ is helpful but not required. You should already understand networking, operating systems and basic security ideas.

Is PenTest+ only about hacking tools?

No. A large part of the exam is about planning an engagement, staying within scope and writing clear reports that explain risk to the business.

How long is the CompTIA PenTest+ PT0-003 course?

The course runs for 30 hours 24 minutes across 92 lesson videos, with 150 test questions to practise with.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$449.00
Buy course