Skip to content

Index

# 🟠 CompTIA PenTest+ — Study Hub ### A source-grounded study hub for **CompTIA PenTest+ (PT0-003)** *Concepts, methodology, real diagrams, and exam prep* — the **vendor-neutral, hands-on penetration-testing** certification, with strong engagement-management and reporting coverage. ![Exam](https://img.shields.io/badge/exam-PT0--003-red) ![Domains](https://img.shields.io/badge/domains-5-blue) ![Format](https://img.shields.io/badge/exam-≤90Q%20%2F%20165min-1f6feb) ![Diagrams](https://img.shields.io/badge/diagrams-Mermaid-ff3670) ![Use](https://img.shields.io/badge/use-educational%20%26%20authorized%20only-orange)

[!WARNING] Educational & authorized use only. Penetration testing is legal only with explicit written authorization, scope, and Rules of Engagement (RoE). This hub explains techniques conceptually for understanding, methodology, and defense — no weaponized step-by-step playbooks. See the CEH hub's legal & ethics.

[!NOTE] Unofficial & no fabrication. Not affiliated with or endorsed by CompTIA. Exam specifics are from CompTIA's official PenTest+ page; volatile items (price, exam code, scoring model, CEU renewal) should be re-checked there. Compiled 2026-06-20.

📋 At a glance

Item Detail
Exam PT0-003 (launched 2024; verify on CompTIA)
Format Max 90 questions — multiple-choice + performance-based (PBQ)
Duration / pass 165 minutes · passing/scoring model — verify on CompTIA
Level / focus Intermediate, vendor-neutral, hands-on offensive + methodology/reporting
Recommended Network+/Security+ and ~3–4 years pentest/security experience (verify)

Full details: exam & objectives.

🗺️ The five domains

flowchart LR
    D1["1 · Engagement<br/>Management — 13%"] --> D2["2 · Recon &<br/>Enumeration — 21%"]
    D2 --> D3["3 · Vuln Discovery<br/>& Analysis — 17%"]
    D3 --> D4["4 · Attacks &<br/>Exploits — 35%"]
    D4 --> D5["5 · Post-exploitation<br/>& Lateral Movement — 14%"]
# Domain Weight Page
1 Engagement Management 13% 01-engagement-management.md
2 Reconnaissance and Enumeration 21% 02-reconnaissance-and-enumeration.md
3 Vulnerability Discovery and Analysis 17% 03-vulnerability-discovery-and-analysis.md
4 Attacks and Exploits 35% 04-attacks-and-exploits.md
5 Post-exploitation and Lateral Movement 14% 05-post-exploitation-and-lateral-movement.md

(Weightings per CompTIA — verify on the official objectives.)

📦 What's inside

Section Contents
Overview What is PenTest+ · Exam & objectives
The 5 domains Engagement management, recon/enum, vuln discovery, attacks & exploits, post-exploitation — concept + defense
Exam prep Study plan · Practice questions · Cheat sheet
Reference Glossary — acronyms cross-link the Security+ list

🧭 Where it fits

PenTest+ is the vendor-neutral, report-focused offensive cert. It pairs with the rest of this repo:

  • Alongside the CEH hub — CEH is broad knowledge; PenTest+ adds the hands-on engagement-and-reporting workflow. Many cross-links go straight to the CEH modules.
  • Defensive flip side → every attack here maps to a control in the attack → defense matrix; Domain 5 leans on WALLIX / PAM as the defense against lateral movement.
  • Practical hands-on next steps → OSCP and PNPT.

CompTIA and PenTest+ are trademarks of CompTIA, used here for identification and educational purposes only.