CompTIA PenTest+

CompTIA PenTest+ Module 1  
Penetration Testing

• What is Penetration Testing?
• Who Performs Penetration Tests?
• Cyber Kill Chain
• Tools of the Trade
• Scoping and Planning Engagements
• Penetration Testing Standards and Methodologies
• Key Legal Concepts for Penetration Tests

CompTIA PenTest+ Module 2
Information Gathering

• Footprinting and Enumeration
• Location and Organizational Data
• Infrastructure and Networks
• Active Reconnaissance
• Packet Crafting and Inspection
• Information Gathering and Defenses
• Hosts and Services
• Topologies and Network Traffic

CompTIA PenTest+ Module 3
Vulnerability Scanning

• Identifying Vulnerability Management Requirements
• Configuring and Executing Vulnerability Scans
• Software Security Testing
• Developing a Remediation Workflow
• Overcoming Barriers to Vulnerability Scanning

CompTIA PenTest+ Module 4
Analyzing Vulnerability Scans

• Reviewing and Interpreting Scan Reports
• Understanding CVSS
• Validating Scan Results
• Common Vulnerabilities
• Mobile Device Security
• Point-of-Sale System Vulnerabilities
• Web Application Vulnerabilities

CompTIA PenTest+ Module 5
Exploiting and Pivoting

• Exploits and Attacks
• Choosing Targets
• Enumeration
• Identifying the Right Exploit
• Exploit Resources
• Exploitation Toolkits
• Fileless Malware
• Leveraging Exploits

CompTIA PenTest+ Module 6
Exploiting Network Vulnerabilities

• Identifying Exploits
• Conducting Network Exploits
• Identifying and Exploiting Common Services
• Wireless Exploits
• Wireless Security Tools

CompTIA PenTest+ Module 7
Exploiting Physical and Social Vulnerabilities

• Physical Facility Penetration Testing
• Entering Facilities
• Information Gathering
• Social Engineering
• Phishing RSA
• Website Based Attacks

CompTIA PenTest+ Module 8
Exploiting Application Vulnerabilities

• Exploiting Injection Vulnerabilities
• Web Application Firewalls
• Command Injection Attacks
• Exploiting Authentication Vulnerabilities
• Exploiting Authorization Vulnerabilities
• Exploiting Web Application Vulnerabilities
• Unsecure Coding Practices

CompTIA PenTest+ Module 9
Attacking Hosts, Cloud Technologies, and Specialized Systems

• Attacking Hosts
• Cross-Platform Exploits
• Credential Attacks and Testing Tools
• Online Password Cracking
• Wordlists and Dictionaries
• Remote Access
• Attacking Virtual Machines and Containers
• Virtual Machine Attacks
• Attacking Cloud Technologies
• Attacking Mobile Devices

CompTIA PenTest+ Module 10
Reporting and Scripting

• Importance of Communication
• Recommending Mitigation Strategies
• Writing a Penetration Testing Report
• Scripting and Penetration Testing
• Variables, Arrays and Substitutions
• Comparison Operations
• String Operations
• Flow Control

**Outlines are subject to change, as courses and materials are updated.**