CompTIA PenTest+
(PT0-003) Study Guide
The complete CertCrack guide to the CompTIA PenTest+ (PT0-003) exam — in-depth explanations, real-world scenarios, exam tips, comparison tables, illustrated walkthroughs, and end-of-chapter checks.
About this guide
CompTIA PenTest+ (PT0-003) Study Guide
Published by CertCrack · certcrack.com
Copyright © 2026 CertCrack. All rights reserved.
A note on the pictures: every figure in this guide is an original illustration created by CertCrack, not a screenshot of a vendor product. The illustrations teach the workflow and the decision points; where a step needs a real tool, the text names the tool to practise on with systems you own or are authorized to test.
Unofficial study material — not affiliated with or endorsed by CompTIA, Inc. CompTIA and PenTest+ are trademarks of CompTIA, Inc.
Contents
- Ch 1Engagement Management
Engagement types, scoping, rules of engagement, authorization, legal and ethical compliance, communication, and penetration test reports — plus the Engagement Toolkit: scoping the tools before they run. - Ch 2Reconnaissance and Enumeration
Active and passive recon, OSINT, DNS enumeration, Nmap scanning, directory and vhost enumeration, Recon-ng and Maltego, Wireshark, and recon scripting — plus the Recon Toolkit: Amass, SpiderFoot, the Wayback Machine, DNSdumpster, Hunter.io, WiGLE, and InSSIDer. - Ch 3Vulnerability Discovery and Analysis
Scan types, SAST and DAST, scan troubleshooting, reading scanner output, false positives and negatives, CVSS and EPSS, manual validation, and prioritization — plus the Discovery Toolkit: TruffleHog, Trivy, Grype, Kube-hunter, and Docker Bench. - Ch 4Attacks and Exploits
Network, wireless, application, cloud, social engineering, and password attacks; exploitation tools; privilege escalation; and the AI attack surface — plus the Attack Toolkit: the tools the objectives name, from Rubeus and Certify to Pacu, WiFi-Pumpkin, Evilginx, and Caldera. - Ch 5Post-exploitation and Lateral Movement
Persistence, Windows and Linux privilege escalation, lateral movement, pivoting and tunneling, collection and exfiltration, covering tracks, and cleanup and retesting — plus the Post-exploitation Toolkit: Covenant, sshuttle, and Netcat. - IndexTool Index
Every tool named in the official PT0-003 objectives in one revision table, with a final check-yourself set.
Want the full CompTIA PenTest+ (PT0-003) package?
This guide is free to read. Get the full PT0-003 practice exam — 750 questions plus 10 PBQs — with the complete PDF and online access.
Get PT0-003 Full Access — $10