Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Training Camp's 5-day CompTIA PenTest+ boot camp covers penetration testing, vulnerability assessment, and attack techniques with a Hands-on offensive security training. Exam voucher and free retake included.

Award Winning CompTIA Platinum Partner

Get CompTIA PenTest+ Certified

Official CompTIA PenTest+ Boot Camp. Expert penetration testing training, mobile app, exam voucher, free retake, and hands-on labs included. Train like your career depends on it.

Verified for 2026 PT0-003 Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official CompTIA

Authorized Training

Proven by 50,000+. Backed by our Free Retake Guarantee

Start Monday. Test Friday. No Waiting. No Risk.

5 days designed for security professionals who need results fast. Walk out exam-ready with our free retake guarantee.

Program Abstract

REF: PT0-003 5
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 5

The PenTest+ is Hard. We Know How to Pass It.

This intensive 5-day boot camp program covers all domains of the PenTest+ certification, teaching you proven strategies to pass on your first attempt. Our expert instructors guide you through the material with hands-on exercises and real-world scenarios. By Friday, you’ll be ready to test.

Official CompTIA Training.

Third-party materials can’t keep up with exam changes. We use CompTIA’s authorized courseware, so you’re studying exactly what’s on the test—not outdated guesswork.

System Integrity Check
Content Source CompTIA Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$439 exam voucher included with your enrollment. No surprise costs, no last-minute purchases, just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $439 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with CAT-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Test Friday. No Waiting.

Our private Pearson VUE testing center means you take your exam immediately after class. No scheduling delays, no waiting weeks to test while knowledge fades.

Friday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Buy one CompTIA boot camp, get a second one 50% off

Pair this boot camp with any CompTIA boot camp of equal or lesser value, for yourself or a colleague, and the second one is half price. Use code BOGO50 by December 15, 2026.

See the offer
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Partner of the Year

Certify in CompTIA PenTest+ with the CompTIA Partner of the Year, a provider backed by 25 years of certification boot camp experience.

Clock icon

We Deliver CompTIA Exams

Take the PenTest+ exam where you trained. Training Camp is the only company in the US and Canada allowed to deliver CompTIA exams onsite.

Flower icon

Free Exam Retake

Don’t pass on your first attempt? Exam assurance includes a free second exam voucher and a full course retake at no cost.

Light bulb icon

Real Engagement Labs

Practice full engagements in Day 3-4 labs. PT0-003 (2024) added cloud and IoT pentesting, and Attacks and Exploits alone carries 35% of the exam.

Stars icon

CompTIA in Demand

Qualify for DCWF roles with PenTest+, a DoD 8140 qualification. Practicing pentesters teach the 5-day PenTest+ boot camp, so you think like an attacker.

Sunglasses icon

Ongoing Mentoring

Stay supported after the PenTest+ class ends with continued access to your instructor and CompTIA resources while you prepare for exam day.

CompTIA PenTest+ Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    CompTIA PenTest+ Certification
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3

    MODULE_ID: PENTEST-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Engagement Management and Scoping

    PT0-003 Exam Structure, Domains, and PBQ Format
    L.01.1
    Scoping and Rules of Engagement
    L.01.2
    Target Selection: CIDR Ranges, Domains, IPs, and URLs
    L.01.3
    Assessment Types: Network, Web, Mobile, Cloud, and API
    L.01.4
    Legal Agreements: NDA, MSA, SOW, and ToS
    L.01.5
    Threat-Modeling Frameworks and Attack Surface Definition
    L.01.6
    Lab: Scope an Engagement and Draft Rules of Engagement
    L.01.7
    Authorization, Mandatory Reporting, and Escalation Paths
    L.01.8
    Communication Triggers and Stakeholder Updates
    L.01.9
    Report Structure: Executive Summary and Technical Findings
    L.01.10
    Risk Ratings and Remediation Recommendations
    L.01.11
    Peer Review and Report Quality Control
    L.01.12
    Legal, Ethical, and Compliance Considerations
    L.01.13
    Lab: Outline a Penetration Test Report Template
    L.01.14

    MODULE_ID: PENTEST-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Reconnaissance and Enumeration

    Passive Reconnaissance and OSINT Techniques
    L.02.1
    WHOIS, DNS, and Certificate Transparency Analysis
    L.02.2
    Active Scanning With Nmap and Masscan
    L.02.3
    Sniffing and Network Traffic Analysis
    L.02.4
    Cloud and Wireless Asset Discovery
    L.02.5
    Lab: Perform Passive Recon With theHarvester and Shodan
    L.02.6
    Lab: Active Scan and Fingerprint a Target Network
    L.02.7
    Host, Service, and Directory Enumeration
    L.02.8
    Application and API Enumeration
    L.02.9
    SMB, SNMP, LDAP, and DNS Enumeration
    L.02.10
    Modifying Python Scripts for Enumeration
    L.02.11
    Modifying PowerShell and Bash Scripts
    L.02.12
    Organizing and Documenting Enumeration Results
    L.02.13
    Lab: Enumerate Services and Adapt a Python Script
    L.02.14

    MODULE_ID: PENTEST-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Vulnerability Discovery and Analysis

    Authenticated Versus Unauthenticated Scanning
    L.03.1
    Vulnerability Scanning With Nessus and OpenVAS
    L.03.2
    Application Scans: SAST, DAST, IAST, and SCA
    L.03.3
    Infrastructure-as-Code and Source Code Review
    L.03.4
    Mobile and Wireless Vulnerability Scanning
    L.03.5
    Lab: Run and Compare Authenticated and Unauthenticated Scans
    L.03.6
    Lab: Perform Static Analysis on Sample Source Code
    L.03.7
    Validating Findings and Ruling Out False Positives
    L.03.8
    CVE Research and CVSS Scoring
    L.03.9
    Troubleshooting Scan Configuration and Coverage
    L.03.10
    Prioritizing Vulnerabilities for Exploitation
    L.03.11
    Mapping Findings to Attack Paths
    L.03.12
    Documenting Evidence for the Report
    L.03.13
    Lab: Validate and Prioritize Scan Results
    L.03.14

    MODULE_ID: PENTEST-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Attacks and Exploits

    Network Attacks and On-Path Techniques
    L.04.1
    Authentication Attacks: Spraying, Relay, and Pass-the-Hash
    L.04.2
    Host-Based Attacks and Privilege Escalation
    L.04.3
    Wireless Attacks: WPA Cracking and Rogue APs
    L.04.4
    Social Engineering: Phishing, Pretexting, and Physical
    L.04.5
    Lab: Exploit a Host and Escalate Privileges
    L.04.6
    Lab: Crack a Wireless Handshake and Capture Credentials
    L.04.7
    Injection Attacks: SQL, Command, and SSTI
    L.04.8
    Cross-Site Scripting and Web Application Flaws
    L.04.9
    API Attacks: OAuth, JWT, and Session Hijacking
    L.04.10
    Cloud Attacks: Misconfiguration, Storage, and IAM
    L.04.11
    Container and Kubernetes Attacks
    L.04.12
    AI Attacks: Prompt Injection and Model Manipulation
    L.04.13
    Lab: Exploit a Web Application and a Cloud Misconfiguration
    L.04.14

    MODULE_ID: PENTEST-05

    Live Training QS: ~7
    DAY 5
    Critical Path

    Post-Exploitation, Reporting, and Exam

    Establishing Persistence and Beaconing
    L.05.1
    Privilege Escalation Across Systems
    L.05.2
    Network Pivoting and Lateral Movement
    L.05.3
    Data Exfiltration Techniques
    L.05.4
    Artifact Cleanup and Scope Maintenance
    L.05.5
    Building the Attack Narrative and Remediation Guidance
    L.05.6
    Lab: Pivot, Move Laterally, and Clean Up Artifacts
    L.05.7
    Writing Findings With Risk Ratings and Remediation
    L.05.8
    Stakeholder Presentation and Communication
    L.05.9
    Lab: Produce a Report From Engagement Data
    L.05.10
    Cross-Domain Review Weighted to Attacks and Exploits
    L.05.11
    Exam-Day Strategy and Time Management
    L.05.12
    Full-Length Practice Exam and Review
    L.05.13
    Exam: PT0-003
    L.05.14

    MODULE_ID: POST

    Live Training QS: ~8
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 5
    FREQUENTLY ASKED QUESTIONS

    CompTIA PenTest+ Certification
    FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    Cybersecurity professionals, ethical hackers, penetration testers, security analysts, and IT professionals looking to enhance their offensive security skills.

    Basic networking and security knowledge is recommended, but hands-on labs will help all experience levels gain practical penetration testing skills.

    Yes! This course covers all exam objectives and provides real-world penetration testing exercises to reinforce your learning.

    Yes! You’ll conduct real-world penetration tests, including reconnaissance, exploitation, privilege escalation, and post-exploitation techniques.

    The CompTIA PenTest+ is a globally recognized certification that validates your penetration testing skills, helping you qualify for ethical hacking and security analyst roles.

    Yes! This course follows ethical hacking and penetration testing best practices, adhering to legal and compliance standards.

    Get the Free
    PENTEST Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    PenTest+ Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    ★★★★★

    Excellent course, with an engaging and high energy instructor who really brought the Pentest+ to life.

    MS
    Mil** Sch***** N**le
    ★★★★★

    The Pentest+ course and instructor were great and kept me fully motivated and engaged throughout the five days. I would highly recommend the boot camp way of lea...

    AC
    Arn*** Con*** M**riott
    ★★★★★

    Long hours you will not forget and at the end……Pentest+ certification!

    LS
    Les She**** C**I
    ★★★★★

    I highly recommend Training Camp to anyone in need of professionally delivered Pentest training at this pace.

    Free practice test

    Not sure you are ready for the PenTest+ exam yet?

    Our free PenTest+ practice test runs 50 questions on a 90-minute timer, with an explanation for every answer choice, not just the right one. Short on time? Take the 25-question quick version instead.

    Start the PenTest+ test
    Continue Your Journey

    PenTest+ Related Courses

    Advance your career with these recommended certifications

    Featured on