StationX
Start free

Home › Exams › PT0-003

PT0-003 hands-on labs — CompTIA PenTest+

PT0-003 is the exam for CompTIA PenTest+. 99 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 117 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 66 come with StationX Membership ($299/year) and 33 need StationX Infrastructure Labs ($149/year).

99 labsabout 117 hoursStationX Membership · $299 / year · 66 labsStationX Infrastructure Labs · $149 / year · 33 labs

Access

StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

PT0-003 at a glance

Exam code
PT0-003
Certification
CompTIA PenTest+
Vendor
CompTIA
Labs
33 in StationX Infrastructure Labs · 66 in StationX Membership
How the labs are mapped
99 from the StationX roadmap
Practice time
About 117 hours, every lab states a duration
Lab levels
Guided 21 · Advanced 9 · Expert 3 · not stated 66

The 99 PT0-003 labs

  1. Additional Scanning Options1 h
  2. Automated Vulnerability Assessments1 h
  3. Basics of Metasploit2 h
  4. Can You Exploit Windows with Metasploit and Code Analysis?45 minAdvanced
  5. Can You Exploit Windows?45 minAdvanced
  6. Can You Explore Vulnerabilities in Systems, Network Traffic, and Passwords?45 minAdvanced
  7. Can You Explore Vulnerabilities in Systems, Network Traffic, and Passwords?45 minAdvanced
  8. Can You Find Flaws with OSINT and Vulnerability Scanning?45 minAdvanced
  9. Can You Perform DOS and AitM Attacks?45 minAdvanced
  10. Can You Perform Information Gathering, Credentialed Vulnerability Access, and Attack a Boundary Server?1 hExpert
  11. Can You Perform Lateral Movement and Post-exploit Activities?45 minAdvanced
  12. Can You Perform Open-source Intelligence (OSINT)-Gathering Operations?1 hExpert
  13. Can You Perform OSINT and Host Discovery?30 minAdvanced
  14. Can You Perform OSINT by Using recon-ng, Perform Scans with Nmap & GSA, and Perform AitM Attacks?1 hExpert
  15. Can You Perform OSINT Techniques to Unveil Hidden Network Details and Service Information?45 minAdvanced
  16. Client-Side Exploitation with Social Engineering1 h
  17. Core Impact Vulnerability Scan2 h
  18. Creating Recommendations Based on Vulnerability Assessments1 h
  19. Cybersecurity Testing with Core Impact1 h
  20. Discover and Exploit Targets by Using Metasploit30 minGuided
  21. Evaluate the Risk of Password Cracking to Your IT Environment45 minGuided
  22. Evasive Maneuvers and Post Exploitation1 h
  23. Execute Network Reconnaissance30 minGuided
  24. Exploit Common Windows Flaws30 minGuided
  25. Exploit Flawed Code30 minGuided
  26. Explore Network Traffic by Using Wireshark30 minGuided
  27. Gain Remote Access to a Windows System30 minGuided
  28. Host Identification Scanning via Windows1 h
  29. Host Identification Scanning with Linux1 h
  30. Identifying System Vulnerabilities with OpenVAS2 h
  31. Intercept and Obtain Passwords30 minGuided
  32. Intro To Linux - Backing Up, Compression, and Scheduling1 h
  33. Intro to Linux - Routing and SSH Tunnels2 h
  34. Intro to Python2 h
  35. Linux Exploitation1 h
  36. Manual Vulnerability Assessment1 h
  37. Monitor Network Traffic by Using Wireshark45 minGuided
  38. Nessus Scanning and Reporting3 h
  39. Nessus Setup and Config3 h
  40. Network Discovery2 h
  41. Network Miner1 h
  42. Open Source Collection2 h
  43. Open Source Password Cracking1 h
  44. OWASP Top Ten 2025 - A01 Broken Access Controls1 h
  45. OWASP Top Ten 2025 - A02 Security Misconfiguration1 h
  46. OWASP Top Ten 2025 - A03 Software Supply Chain Failures1 h
  47. OWASP Top Ten 2025 - A04 Cryptographic Failures1 h
  48. OWASP Top Ten 2025 - A05 Injection1 h
  49. OWASP Top Ten 2025 - A06 Insecure Design1 h
  50. OWASP Top Ten 2025 - A07 Authentication Failures1 h
  51. OWASP Top Ten 2025 - A08 Software or Data Integrity Failures1 h
  52. OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures1 h
  53. OWASP Top Ten 2025 - A10 Mishandling of Exceptional Conditions1 h
  54. OWASP Top Ten 2025 - Capstone3 h
  55. OWASP Top Ten 2025 - Capstone (pt.1)1 h 30 min
  56. OWASP Top Ten 2025 - Capstone (pt.2)1 h 30 min
  57. Pentesting & Network Exploitation - Linux Target Analysis Labs2 h
  58. Pentesting & Network Exploitation: DMZ Exploitation1 h
  59. Pentesting & Network Exploitation: LAN Exploitation2 h
  60. Pentesting & Network Exploitation: Windows Target Analysis Labs1 h
  61. Perform an Attacker-in-the-Middle (AitM) Exploitation30 minGuided
  62. Perform DOS Attacks30 minGuided
  63. Perform Lateral Movement30 minGuided
  64. Perform Open Source Intelligence30 minGuided
  65. Perform Open Source Intelligence45 minGuided
  66. Perform Open System Intelligence (OSINT) Gathering30 minGuided
  67. Perform Post-Exploit Activities30 minGuided
  68. Perform Vulnerability Scanning by using Greenbone Security Assistant (GSA)45 minGuided
  69. Perform Vulnerability Scans30 minGuided
  70. Post Exploitation and Pivoting2 h
  71. Python2 h
  72. Python Tool Building - Authenticated SQLi2 h
  73. Python Tool Building - Banner Grabber2 h
  74. Python Tool Building - C22 h
  75. Python Tool Building - Local File Inclusion2 h
  76. Scanning and Enumeration3 h
  77. Scanning and Enumeration2 h
  78. Scanning and Mapping Networks2 h
  79. Scanning From Windows1 h
  80. Schedule and Perform Network Vulnerability Scans30 minGuided
  81. Take Advantage of Anti-Forensic Techniques30 minGuided
  82. Use Network Tools to Perform Discovery Scanning and Network Reconnaissance45 minGuided
  83. Vulnerability Scanner Set-up and Configuration1 h
  84. Web 201 - Lab 1: Recon Tools1 h
  85. Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injections1 h
  86. Web 201 - Lab 2.2: Advanced Sqlmap2 h
  87. Web 201 - Lab 2.3: Manual Blind SQL Injection2 h
  88. Web 201 - Lab 2.4: NoSQL Injection1 h
  89. Web 201 - Lab 3.1: Cross Site Scripting Filter Evasion1 h
  90. Web 201 - Lab 3.2: Exploiting Misconfigured CORS1 h
  91. Web 201 - Lab 4: Advanced OS Command Injection1 h
  92. Web 201 - Lab 5: Advanced Local File Inclusion1 h
  93. Web 201 - Lab 6: Advanced CSRF1 h
  94. Web 201 - Lab 7.1: XXE to Obtain Arbitrary Files1 h
  95. Web 201 - Lab 7.2: Out of Band XXE Attacks1 h
  96. Web 201 - Lab 8: Server Side Request Forgery1 h
  97. Web 201 - Lab 9: Insecure Deserialization in Python and Java1 h
  98. Windows Exploitation2 h
  99. Windows Rootkits With Python2 h

Roadmaps for PT0-003