CompTIA PenTest+
What's In It For Me
The CompTIA PenTest+ (V3) certification validates your ability to plan, execute, and report on penetration testing engagements across modern environments — from networks, web apps, APIs, to cloud and IoT.
This course equips you with hands-on, performance-based skills in vulnerability discovery, exploitation, post-exploitation, and lateral movement, enabling you to operate as a trusted penetration tester or security consultant.
Your CompTIA Training comes with the following:
• 5 Days instructor-led training
• Lab access included
• Course materials included
Course Overview
CompTIA PenTest+ validates the latest skills in penetration testing, vulnerability assessment, and management. It is essential for evaluating an organization’s network resilience against cyberattacks and is an intermediate-level cybersecurity certification designed for professionals who want to strengthen their offensive security capabilities through hands-on pen testing and vulnerability assessment.
- Plan and scope penetration tests
- Conduct passive reconnaissance
- Perform non-technical tests to gather information
- Conduct active reconnaissance
- Analyze vulnerabilities
- Penetrate networks
- Exploit host-based vulnerabilities
- Test applications
- Complete post-exploit tasks
- Analyze and report penetration test results
Training Type
Full-Time
Who Should Attend
This course is ideal for professionals who:
- Are already in IT security or audit roles and want to move into pentesting
- Want to validate their offensive security skills in modern attack surfaces
- Seek a credential that bridges theoretical knowledge with hands-on practice
Course Duration
5 Days
Course Objectives
About the exam
Engagement Management
13%
- Planning and scoping: defining rules of engagement, testing windows, and target selection.
- Legal and ethical compliance: ensuring authorization letters, mandatory reporting, and adherence to regulations.
- Collaboration and communication: aligning with stakeholders through peer reviews, escalation paths, and risk articulation.
- Penetration test reports: creating reports with executive summaries, findings, and remediation recommendations.
Reconnaissance and Enumeration
21%
- Active and passive reconnaissance: gathering information using open-source intelligence (OSINT), network sniffing, and protocol scanning.
- Enumeration techniques: performing DNS enumeration, service discovery, and directory enumeration.
- Reconnaissance tools: using tools like Nmap, Wireshark, and Shodan for information gathering.
- Script modification: customizing Python, PowerShell, and Bash scripts for reconnaissance and enumeration.
Vulnerability Discovery and Analysis
17%
- Vulnerability scans: conducting authenticated, unauthenticated, static application security testing (SAST) and dynamic application security testing (DAST).
- Result analysis: validating findings, troubleshooting configurations, and identifying false positives.
- Discovery tools: using tools like Nessus, Nikto, and OpenVAS for vulnerability discovery.
Attacks and Exploits
35%
- Network attacks: performing VLAN hopping, on-path attacks, and service exploitation.
- Authentication attacks: executing brute-force attacks, pass-the-hash, and credential stuffing.
- Host-based attacks: conducting privilege escalation, process injection, and credential dumping.
- Web application attacks: performing SQL injection, cross-site scripting (XSS), and directory traversal.
- Cloud-based attacks: exploiting container escapes, metadata service attacks, and identity and access management (IAM) misconfiguration.
- AI attacks: explaining prompt injection and model manipulation against artificial intelligence systems.
Pre-requisites
Recommended experience: 3 to 4 years in a penetration testing or related role, with foundational knowledge of security, networks, systems, and scripting.
Medium of Instruction & Trainer
English
Course Pre-Requisites
Price
| Course Fee Payable | ||
|---|---|---|
| Original Fee | Before GST | With GST (9%) |
| Course Fee | $2,400.00 | $2,616.00 |
Please note that prices are subjected to change.
