CompTIA PenTest+ - Certification Program

CompTIA PenTest+ Module 1
Penetration Testing

• What is Penetration Testing?
• Who Performs Penetration Tests?
• Scoping and Planning Engagements
• Penetration Testing Standards and Methodologies
• Key Legal Concepts for Penetration Tests
• Footprinting and Enumeration
• Active Reconnaissance
• Information Gathering and Defenses

CompTIA PenTest+ Module 2

Vulnerability Scanning

• Identifying Vulnerability Management Requirements
• Configuring and Executing Vulnerability Scans
• Software Security Testing
• Developing a Remediation Workflow
• Overcoming Barriers to Vulnerability Scanning
• Reviewing and Interpreting Scan Reports
• Validating Scan Results
• Common Vulnerabilities

CompTIA PenTest+ Module 3

Exploiting Part I

• Exploits and Attacks
• Exploitation Toolkits and Specifics
• Leveraging Exploits
• Persistence and Evasion
• Covering Your Tracks
• Identifying Exploits
• Conducting Network Exploits
• Identifying and Exploiting Common Services
• Wireless Exploits

CompTIA PenTest+ Module 4

Exploiting Part II

• Physical Facility Penetration Testing
• Social Engineering
• Exploiting Injection Vulnerabilities
• Exploiting Authentication Vulnerabilities
• Exploiting Authorization Vulnerabilities
• Exploiting Web Application Vulnerabilities
• Unsecure Coding Practices
• Application Testing Tools

CompTIA PenTest+ Module 5

Attacking

• Attacking Hosts
• Credential Attacks and Testing Tools
• Remote Access
• Attacking Virtual Machines and Containers
• Attacking Cloud Technologies
• Attacking Mobile Devices
• Attacking Data Storage

CompTIA PenTest+ Module 6

Reporting and Scripting

• Importance of Communication
• Recommending Mitigation Strategies
• Writing a Penetration Testing Report
• Scripting and Penetration Testing
• Variables, Arrays and Substitutions
• Comparison Operations
• String Operations
• Flow Control