Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

View Schedule & Pricing
Get a Quote
Book a Meeting

Popular Searches

CISSP Security+ AWS Azure CCNA CompTIA Cloud Cybersecurity

Quick Links

Training Camp's 6-day CEH/PenTest+ combo boot camp covers both EC-Council ethical hacking and CompTIA penetration testing certifications. Two offensive security certs in one session. Exam vouchers included.

Award Winning CompTIA Platinum Partner

EC-Council CEH/PenTest+ Combo Boot Camp

Dual certification EC-Council CEH and CompTIA PenTest+ Boot Camp. Expert ethical hacking training, mobile app, exam vouchers, free retake, and hands-on labs included. Train like your career depends on it.

Verified for 2026 CEH v13 / PT0-003 Exam
View Price & Schedules Get Team Quote
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

CompTIA & EC-Council

Authorized Training

Proven by 50,000+. Backed by our Free Retake Guarantee

Start Monday. Test Friday. No Waiting. No Risk.

6 days designed for security professionals who need results fast. Walk out exam-ready with our free retake guarantee.

Program Abstract

REF: CEH v13 / PT0-003 20
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 6

The CEH/PenTest+ Combo is Hard. We Know How to Pass It.

This intensive 6-day boot camp program covers all 20 CEH modules and all five PenTest+ (PT0-003) domains, teaching you proven strategies to pass both exams on your first attempt. Our expert instructors guide you through the material with hands-on exercises and real-world scenarios. You test in class, with no waiting.

Official EC-Council and CompTIA Training.

Third-party materials can’t keep up with exam changes. We use EC-Council’s and CompTIA’s authorized courseware, so you’re studying exactly what’s on both tests, not outdated guesswork.

System Integrity Check
Content Source EC-Council Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$1,638 in exam vouchers (CEH and PenTest+) included with your enrollment. No surprise costs, no last-minute purchases, just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $1,638 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with exam-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Test in Class. No Waiting.

Our private Pearson VUE testing center means you take both exams during the boot camp week. No scheduling delays, no waiting weeks to test while knowledge fades.

End of Week
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Our instructors work in the fields they teach, not just in the classroom.

"I teach what works on real engagements, and how to write it up so it gets fixed."

Eric Beasley

Lead Instructor • CISSP, CEH All of our trainers carry a wide range of certifications, including the certification for every program they teach or manage.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Train with the Leaders in Cybersecurity

We’ve helped more IT pros get CEH and PenTest+ certified than almost anyone else. Choose our fast-paced 6-day boot camp for efficient, expert-led training.

Clock icon

Maximize Your Time – Get Certified Faster

Our program is built to deliver results quickly, condensing critical cybersecurity skills, tools, and attack methodologies into an accelerated, hands-on format.

Flower icon

Less Pressure – Exam Retake Guarantee

We’ve got your back. If you don’t pass the first time, you’ll receive a free retake voucher and can attend the course again at no charge.

Light bulb icon

Real Skills – Not Just Test Prep

We focus on practical knowledge and lab-based learning to help you succeed on the exam—and in real-world penetration testing roles.

Stars icon

Boost Your Cybersecurity Career

With demand growing for skilled ethical hackers and penetration testers, this dual certification gives you a powerful edge in today’s job market.

Sunglasses icon

We’re With You – Even After Class

Get direct access to your instructor and post-class resources, so you’re supported every step of the way—even after training ends.

EC-Council CEH/PenTest+ Combo Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    EC-Council CEH PenTest+ Combo
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Ethical Hacking Foundations, Reconnaissance, and Scanning

    CEH 312-50 and PT0-003 Exam Formats and Dual-Cert Roadmap
    L.01.1
    Cyber Kill Chain, MITRE ATT&CK, and Hacking Phases
    L.01.2
    Laws, Standards, and Rules of Engagement for Authorized Testing
    L.01.3
    Passive Footprinting With OSINT, WHOIS, and DNS
    L.01.4
    AI-Powered OSINT and Reconnaissance Tooling
    L.01.5
    Lab: Footprint a Target With theHarvester and Recon-ng
    L.01.6
    Lab: Map an Attack Surface Using Shodan and Google Dorks
    L.01.7
    Network Scanning With Nmap: Host Discovery and Port States
    L.01.8
    Service and Version Detection and Banner Grabbing
    L.01.9
    Enumerating SMB, SNMP, LDAP, NFS, and DNS
    L.01.10
    Vulnerability Scanning With Nessus and OpenVAS
    L.01.11
    Understanding CVE, CVSS Scoring, and Prioritization
    L.01.12
    Lab: Scan and Enumerate a Target Network With Nmap
    L.01.13
    Lab: Run a Credentialed Vulnerability Scan and Triage Results
    L.01.14
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    System Hacking, Malware, Sniffing, and Social Engineering

    Password Attacks: Cracking, Spraying, and Pass-the-Hash
    L.02.1
    Privilege Escalation on Windows and Linux
    L.02.2
    Maintaining Access, Backdoors, and Clearing Logs
    L.02.3
    Malware Types: Trojans, Ransomware, Rootkits, and Fileless Malware
    L.02.4
    Static and Dynamic Malware Analysis Basics
    L.02.5
    Lab: Crack Credentials and Escalate Privileges With Mimikatz
    L.02.6
    Lab: Analyze Malware Behavior in a Sandbox
    L.02.7
    Packet Capture and Analysis With Wireshark and tcpdump
    L.02.8
    ARP Poisoning, MAC Flooding, and DHCP Spoofing
    L.02.9
    DNS Spoofing and Man-in-the-Middle Techniques
    L.02.10
    Social Engineering: Phishing, Pretexting, and Impersonation
    L.02.11
    ChatGPT-Powered AI Tools for Attack Crafting
    L.02.12
    Lab: Perform an ARP Poisoning Man-in-the-Middle Attack
    L.02.13
    Lab: Build and Launch a Phishing Campaign in a Lab
    L.02.14
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Web, Application, and Evasion Attacks

    Denial-of-Service and Distributed DoS Techniques
    L.03.1
    Session Hijacking and Token and Cookie Attacks
    L.03.2
    Evading IDS and IPS With Fragmentation and Obfuscation
    L.03.3
    Firewall and Honeypot Detection and Bypass
    L.03.4
    Web Server Attacks and Misconfiguration Exploitation
    L.03.5
    Lab: Hijack a Web Session and Replay a Token
    L.03.6
    Lab: Evade an IDS While Scanning a Target
    L.03.7
    OWASP Top 10: XSS, CSRF, and Broken Access Control
    L.03.8
    Directory Traversal, File Inclusion, and Command Injection
    L.03.9
    SQL Injection: Union, Blind, and Error-Based Techniques
    L.03.10
    Web Attack Tooling: Burp Suite, ZAP, and sqlmap
    L.03.11
    API and Authentication Attacks on Web Applications
    L.03.12
    Lab: Exploit SQL Injection With sqlmap
    L.03.13
    Lab: Find and Exploit XSS and IDOR in a Web App
    L.03.14
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Wireless, Mobile, IoT, Cloud, Cryptography, and CEH Exam

    Wireless Attacks: WPA2/WPA3 Cracking, Evil Twin, and Rogue APs
    L.04.1
    Mobile Platform Attacks on Android and iOS
    L.04.2
    IoT and OT Hacking: Protocols, Firmware, and ICS Risks
    L.04.3
    Cloud Attacks on AWS, Azure, and GCP Misconfigurations
    L.04.4
    Cryptography, PKI, and Common Cryptographic Attacks
    L.04.5
    Lab: Crack a Wireless Handshake and Stand Up an Evil Twin
    L.04.6
    Lab: Exploit a Misconfigured Cloud Storage Bucket
    L.04.7
    CEH v13 Module-by-Module Review and Key Tools
    L.04.8
    Practice Questions by Domain With Instructor Debrief
    L.04.9
    Exam-Day Strategy for the 125-Question Format
    L.04.10
    Mapping CEH Techniques to the PenTest+ Track Ahead
    L.04.11
    Full-Length CEH Practice Exam and Review
    L.04.12
    Exam: CEH 312-50
    L.04.13
    Preview of the PenTest+ Engagement Workflow
    L.04.14
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-05

    Live Training QS: ~7
    DAY 5
    Critical Path

    PenTest+ Engagement, Reconnaissance, and Vulnerability Analysis

    Scoping, Rules of Engagement, and Target Selection
    L.05.1
    Legal Agreements: NDA, MSA, SOW, and Authorization Letters
    L.05.2
    Threat Modeling and Assessment Types: Network, Web, Cloud, API
    L.05.3
    Passive and Active Reconnaissance and OSINT
    L.05.4
    Host, Service, and Directory Enumeration
    L.05.5
    Modifying Python, PowerShell, and Bash Recon Scripts
    L.05.6
    Lab: Scope an Engagement and Perform Recon and Enumeration
    L.05.7
    Authenticated Versus Unauthenticated Scanning
    L.05.8
    Application Scans: SAST, DAST, IAST, and SCA
    L.05.9
    Infrastructure-as-Code and Source Code Review
    L.05.10
    Validating Findings and Ruling Out False Positives
    L.05.11
    Troubleshooting Scan Configuration and Coverage
    L.05.12
    Prioritizing Vulnerabilities for Exploitation
    L.05.13
    Lab: Scan, Validate, and Prioritize Vulnerabilities
    L.05.14
    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: TC-CP+-06

    Live Training QS: ~8
    DAY 6
    Critical Path

    PenTest+ Attacks, Post-Exploitation, Reporting, and Exam

    Network, Authentication, and Host-Based Attacks
    L.06.1
    Web and API Attacks: Injection, SSTI, and Session Flaws
    L.06.2
    Cloud, Container, and IAM Misconfiguration Attacks
    L.06.3
    AI Attacks: Prompt Injection and Model Manipulation
    L.06.4
    Persistence, Privilege Escalation, and Lateral Movement
    L.06.5
    Pivoting, Attack Narratives, and Artifact Cleanup
    L.06.6
    Lab: Exploit, Pivot, and Establish Persistence
    L.06.7
    Lab: Perform Lateral Movement Across a Segmented Network
    L.06.8
    Report Structure: Executive Summary and Technical Findings
    L.06.9
    Risk Ratings, Remediation Guidance, and Stakeholder Communication
    L.06.10
    Mandatory Reporting, Escalation Paths, and Peer Review
    L.06.11
    Lab: Write a Penetration Test Report From Engagement Data
    L.06.12
    Cross-Domain Review Weighted to Attacks and Exploits
    L.06.13
    Full-Length PenTest+ Practice Exam and Review
    L.06.14
    Exam: PT0-003
    L.06.15
    Progress Buffer 80% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: POST

    Live Training QS: ~8
    AFTER CLASS
    Critical Path

    After Class

    Progress Buffer 80% ALLOCATED
    09:00
    End 17:00
    COURSE PROGRESS Day 0 of 6
    FREQUENTLY ASKED QUESTIONS

    CEH & PenTest
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    CEH (Certified Ethical Hacker) focuses on understanding and simulating hacker techniques, while CompTIA PenTest+ emphasizes hands-on penetration testing skills. Both are valuable certifications and recognized under DoD 8140.

    Yes, this course prepares you for certifications listed under the DoD 8140 Cyber Workforce Qualification Program, qualifying you for roles like Cybersecurity Analyst, Penetration Tester, and Ethical Hacker within government and defense environments.

    Absolutely. We offer custom team training options that align with your organization’s tools, infrastructure, and security objectives, delivered either online or at your location.

    Yes, the course includes real-world labs covering recon, vulnerability scanning, web and wireless exploitation, post-exploitation, and a final team-based CTF challenge to reinforce skills.

    This course is ideal for IT security professionals, red team members, government contractors, and DoD personnel preparing for CEH or PenTest+ certification and seeking practical skills to secure networks.

    Yes, official exam vouchers for both CEH and PenTest+ are included, giving you everything you need to earn these credentials after completing the course.

    Get the Free
    TC-CP+ Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    CEH/Pentest+ Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    Featured Story
    ★★★★★

    I am immensely grateful for the CEH experience and highly recommend it to others looking to elevate their cybersecurity expertise

    AP
    Ash*** Por*** M**N
    ★★★★★

    The CEH/PenTest Boot Camp was a game-changer for me.

    AP
    Ama** Pat** C**ersecurity Professional
    ★★★★★

    The instructors were not just classroom teachers but mentors who guided us through the PenTest+ concepts with ease.

    EC
    Ele** Cas******** T**hWoo
    ★★★★★

    Eric Beasley was an excellent teacher for the CEH bootcamp I attended. I really enjoyed the CEH Bootcamp with him at the Training Camp facility.

    MC
    Mar* Con**** N**throp Grumman
    ★★★★★

    Took CISSP and CEH with Training Camp and I owe part of my success to their course and instructor expertise.

    Free practice test

    Not sure you are ready for the PenTest+ exam yet?

    Our free PenTest+ practice test runs 50 questions on a 90-minute timer, with an explanation for every answer choice, not just the right one. Short on time? Take the 25-question quick version instead.

    Start the PenTest+ test
    Continue Your Journey

    CEH/Pentest+ Related Courses

    Advance your career with these recommended certifications

    Featured on