Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

View Schedule & Pricing
Get a Quote
Book a Meeting

Popular Searches

CISSP Security+ AWS Azure CCNA CompTIA Cloud Cybersecurity

Quick Links

Training Camp's 6-day CEH/PenTest+ combo boot camp covers both EC-Council ethical hacking and CompTIA penetration testing certifications. Two offensive security certs in one session. Exam vouchers included.

CEH/PenTest+ Combo Boot Camp – CEH alone hurts. We added PenTest+.

CompTIA Platinum Partner

Prep for both in 6 days. Free Retake Guarantee.

Our 6-day CEH and PenTest+ combo certification boot camp includes official courseware, hands-on labs and both exam vouchers. Train live online or in person.

View Price & Schedules Get Team Quote
Student
Student
Student
Join 250,000+ certified alumni.
Verified for the current CEH and PenTest+ exams
Emilio Vespar, Training Camp mascot, in a zip hoodie

Free Retake

Exam Protection Included

CompTIA & EC-Council

Authorized Training

Live online or in person. Same instructors.

Start Monday. Finish Saturday. Official courseware. Vouchers included.

Six days of live, hands-on prep for CEH and PenTest+, online or in person, with official courseware and both exam vouchers. The Free Retake Guarantee is included.

Program Abstract

REF: CEH v13 / PT0-003 20
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 6

The CEH/PenTest+ Combo is Hard. We Know How to Pass It.

This intensive 6-day boot camp program covers all 20 CEH modules and all five PenTest+ (PT0-003) domains, teaching you proven strategies to pass both exams on your first attempt. Our expert instructors guide you through the material with hands-on exercises and real-world scenarios. You test in class, with no waiting.

Official EC-Council and CompTIA Training.

Third-party materials can’t keep up with exam changes. We use EC-Council’s and CompTIA’s authorized courseware, so you’re studying exactly what’s on both tests, not outdated guesswork.

System Integrity Check
Content Source EC-Council Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$1,638 in exam vouchers (CEH and PenTest+) included with your enrollment. No surprise costs, no last-minute purchases, just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $1,638 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with exam-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Test Where You Train.

In person, you sit the exam at our private Pearson VUE testing center the day class ends. Live online, you book your own Pearson VUE appointment.

End of Week
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Our instructors work in the fields they teach, not just in the classroom.

"I teach what works on real engagements, and how to write it up so it gets fixed."

Eric Beasley

Lead Instructor • CISSP, CEH All of our trainers carry a wide range of certifications, including the certification for every program they teach or manage.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • Group whiteboard sessions
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Platinum Partner

Training Camp is an award-winning CompTIA Platinum Partner, teaching from EC-Council and CompTIA authorized courseware.

Clock icon

2 Certs in 6 Days

Earn CEH and PenTest+ in one 6-day boot camp that condenses the skills, tools, and attack methods both exams cover into hands-on days.

Flower icon

Free Exam Retake

We’ve got your back. If you don’t pass the first time, you’ll receive a free retake voucher and can attend the course again at no charge.

Light bulb icon

Lab-Based Learning

Practical, lab-based training prepares you for both exams and for real-world penetration testing and ethical hacking roles.

Stars icon

Dual Certification

Demand keeps growing for ethical hackers and penetration testers, and this combo adds both EC-Council and CompTIA credentials.

Sunglasses icon

Support After Class

Get direct access to your instructor and post-class resources, so you have support for both exams after training ends.

EC-Council CEH/PenTest+ Combo Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    EC-Council CEH PenTest+ Combo
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info
    MODULE_ID: PREP
    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-01
    Live Training QS: ~5
    DAY 1
    Critical Path

    Ethical Hacking Foundations, Reconnaissance, and Scanning

    CEH 312-50 and PT0-003 Exam Formats and Dual-Cert Roadmap
    L.01.1
    Cyber Kill Chain, MITRE ATT&CK, and Hacking Phases
    L.01.2
    Laws, Standards, and Rules of Engagement for Authorized Testing
    L.01.3
    Passive Footprinting With OSINT, WHOIS, and DNS
    L.01.4
    AI-Powered OSINT and Reconnaissance Tooling
    L.01.5
    Lab: Footprint a Target With theHarvester and Recon-ng
    L.01.6
    Lab: Map an Attack Surface Using Shodan and Google Dorks
    L.01.7
    Network Scanning With Nmap: Host Discovery and Port States
    L.01.8
    Service and Version Detection and Banner Grabbing
    L.01.9
    Enumerating SMB, SNMP, LDAP, NFS, and DNS
    L.01.10
    Vulnerability Scanning With Nessus and OpenVAS
    L.01.11
    Understanding CVE, CVSS Scoring, and Prioritization
    L.01.12
    Lab: Scan and Enumerate a Target Network With Nmap
    L.01.13
    Lab: Run a Credentialed Vulnerability Scan and Triage Results
    L.01.14
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-02
    Live Training QS: ~6
    DAY 2
    Critical Path

    System Hacking, Malware, Sniffing, and Social Engineering

    Password Attacks: Cracking, Spraying, and Pass-the-Hash
    L.02.1
    Privilege Escalation on Windows and Linux
    L.02.2
    Maintaining Access, Backdoors, and Clearing Logs
    L.02.3
    Malware Types: Trojans, Ransomware, Rootkits, and Fileless Malware
    L.02.4
    Static and Dynamic Malware Analysis Basics
    L.02.5
    Lab: Crack Credentials and Escalate Privileges With Mimikatz
    L.02.6
    Lab: Analyze Malware Behavior in a Sandbox
    L.02.7
    Packet Capture and Analysis With Wireshark and tcpdump
    L.02.8
    ARP Poisoning, MAC Flooding, and DHCP Spoofing
    L.02.9
    DNS Spoofing and Man-in-the-Middle Techniques
    L.02.10
    Social Engineering: Phishing, Pretexting, and Impersonation
    L.02.11
    ChatGPT-Powered AI Tools for Attack Crafting
    L.02.12
    Lab: Perform an ARP Poisoning Man-in-the-Middle Attack
    L.02.13
    Lab: Build and Launch a Phishing Campaign in a Lab
    L.02.14
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-03
    Live Training QS: ~6
    DAY 3
    Critical Path

    Web, Application, and Evasion Attacks

    Denial-of-Service and Distributed DoS Techniques
    L.03.1
    Session Hijacking and Token and Cookie Attacks
    L.03.2
    Evading IDS and IPS With Fragmentation and Obfuscation
    L.03.3
    Firewall and Honeypot Detection and Bypass
    L.03.4
    Web Server Attacks and Misconfiguration Exploitation
    L.03.5
    Lab: Hijack a Web Session and Replay a Token
    L.03.6
    Lab: Evade an IDS While Scanning a Target
    L.03.7
    OWASP Top 10: XSS, CSRF, and Broken Access Control
    L.03.8
    Directory Traversal, File Inclusion, and Command Injection
    L.03.9
    SQL Injection: Union, Blind, and Error-Based Techniques
    L.03.10
    Web Attack Tooling: Burp Suite, ZAP, and sqlmap
    L.03.11
    API and Authentication Attacks on Web Applications
    L.03.12
    Lab: Exploit SQL Injection With sqlmap
    L.03.13
    Lab: Find and Exploit XSS and IDOR in a Web App
    L.03.14
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-04
    Live Training QS: ~7
    DAY 4
    Critical Path

    Wireless, Mobile, IoT, Cloud, Cryptography, and CEH Exam

    Wireless Attacks: WPA2/WPA3 Cracking, Evil Twin, and Rogue APs
    L.04.1
    Mobile Platform Attacks on Android and iOS
    L.04.2
    IoT and OT Hacking: Protocols, Firmware, and ICS Risks
    L.04.3
    Cloud Attacks on AWS, Azure, and GCP Misconfigurations
    L.04.4
    Cryptography, PKI, and Common Cryptographic Attacks
    L.04.5
    Lab: Crack a Wireless Handshake and Stand Up an Evil Twin
    L.04.6
    Lab: Exploit a Misconfigured Cloud Storage Bucket
    L.04.7
    CEH v13 Module-by-Module Review and Key Tools
    L.04.8
    Practice Questions by Domain With Instructor Debrief
    L.04.9
    Exam-Day Strategy for the 125-Question Format
    L.04.10
    Mapping CEH Techniques to the PenTest+ Track Ahead
    L.04.11
    Full-Length CEH Practice Exam and Review
    L.04.12
    Exam: CEH 312-50
    L.04.13
    Preview of the PenTest+ Engagement Workflow
    L.04.14
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-05
    Live Training QS: ~7
    DAY 5
    Critical Path

    PenTest+ Engagement, Reconnaissance, and Vulnerability Analysis

    Scoping, Rules of Engagement, and Target Selection
    L.05.1
    Legal Agreements: NDA, MSA, SOW, and Authorization Letters
    L.05.2
    Threat Modeling and Assessment Types: Network, Web, Cloud, API
    L.05.3
    Passive and Active Reconnaissance and OSINT
    L.05.4
    Host, Service, and Directory Enumeration
    L.05.5
    Modifying Python, PowerShell, and Bash Recon Scripts
    L.05.6
    Lab: Scope an Engagement and Perform Recon and Enumeration
    L.05.7
    Authenticated Versus Unauthenticated Scanning
    L.05.8
    Application Scans: SAST, DAST, IAST, and SCA
    L.05.9
    Infrastructure-as-Code and Source Code Review
    L.05.10
    Validating Findings and Ruling Out False Positives
    L.05.11
    Troubleshooting Scan Configuration and Coverage
    L.05.12
    Prioritizing Vulnerabilities for Exploitation
    L.05.13
    Lab: Scan, Validate, and Prioritize Vulnerabilities
    L.05.14
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: TC-CP+-06
    Live Training QS: ~8
    DAY 6
    Critical Path

    PenTest+ Attacks, Post-Exploitation, Reporting, and Exam

    Network, Authentication, and Host-Based Attacks
    L.06.1
    Web and API Attacks: Injection, SSTI, and Session Flaws
    L.06.2
    Cloud, Container, and IAM Misconfiguration Attacks
    L.06.3
    AI Attacks: Prompt Injection and Model Manipulation
    L.06.4
    Persistence, Privilege Escalation, and Lateral Movement
    L.06.5
    Pivoting, Attack Narratives, and Artifact Cleanup
    L.06.6
    Lab: Exploit, Pivot, and Establish Persistence
    L.06.7
    Lab: Perform Lateral Movement Across a Segmented Network
    L.06.8
    Report Structure: Executive Summary and Technical Findings
    L.06.9
    Risk Ratings, Remediation Guidance, and Stakeholder Communication
    L.06.10
    Mandatory Reporting, Escalation Paths, and Peer Review
    L.06.11
    Lab: Write a Penetration Test Report From Engagement Data
    L.06.12
    Cross-Domain Review Weighted to Attacks and Exploits
    L.06.13
    Full-Length PenTest+ Practice Exam and Review
    L.06.14
    Exam: PT0-003
    L.06.15
    Progress Buffer 80% ALLOCATED
    09:00
    End 17:00
    MODULE_ID: POST
    Live Training QS: ~8
    AFTER CLASS
    Critical Path

    After Class

    Progress Buffer 80% ALLOCATED
    09:00
    End 17:00
    COURSE PROGRESS Day 0 of 6
    FREQUENTLY ASKED QUESTIONS

    CEH & PenTest
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    CEH (Certified Ethical Hacker) focuses on understanding and simulating hacker techniques, while CompTIA PenTest+ emphasizes hands-on penetration testing skills. Both are valuable certifications and recognized under DoD 8140.

    Yes, this course prepares you for certifications listed under the DoD 8140 Cyber Workforce Qualification Program, qualifying you for roles like Cybersecurity Analyst, Penetration Tester, and Ethical Hacker within government and defense environments.

    Absolutely. We offer custom team training options that align with your organization’s tools, infrastructure, and security objectives, delivered either online or at your location.

    Yes, the course includes real-world labs covering recon, vulnerability scanning, web and wireless exploitation, post-exploitation, and a final team-based CTF challenge to reinforce skills.

    This course is ideal for IT security professionals, red team members, government contractors, and DoD personnel preparing for CEH or PenTest+ certification and seeking practical skills to secure networks.

    Yes, official exam vouchers for both CEH and PenTest+ are included, giving you everything you need to earn these credentials after completing the course.

    Get the Free
    TC-CP+ Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    CEH/Pentest+ Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    Featured Story
    ★★★★★

    I am immensely grateful for the CEH experience and highly recommend it to others looking to elevate their cybersecurity expertise

    AP
    Ash*** Por*** M**N
    ★★★★★

    The CEH/PenTest Boot Camp was a game-changer for me.

    AP
    Ama** Pat** C**ersecurity Professional
    ★★★★★

    The instructors were not just classroom teachers but mentors who guided us through the PenTest+ concepts with ease.

    EC
    Ele** Cas******** T**hWoo
    ★★★★★

    Eric Beasley was an excellent teacher for the CEH bootcamp I attended. I really enjoyed the CEH Bootcamp with him at the Training Camp facility.

    MC
    Mar* Con**** N**throp Grumman
    ★★★★★

    Took CISSP and CEH with Training Camp and I owe part of my success to their course and instructor expertise.

    Free practice test

    Not sure you are ready for the PenTest+ exam yet?

    Our free PenTest+ practice test runs 50 questions on a 90-minute timer, with an explanation for every answer choice, not just the right one. Short on time? Take the 25-question quick version instead.

    Start the PenTest+ test
    Continue Your Journey

    CEH/Pentest+ Related Courses

    Advance your career with these recommended certifications

    Featured on