StationX
Start free

← All paths

CompTIA PenTest+ (PT0-003)

Exam PT0-003 CompTIA Intermediate

The offensive counterpart to CySA+. Scoping, reconnaissance, exploitation, post-exploitation and — the part most people underrate — writing the report.

4 courses · 23 sections · 159 lectures · 99 labs · ≈ 117 h of hands-on labs

All 99 PT0-003 hands-on labs on one page →

Free to start: the free lessons and guides for this roadmap →

Exam domains

  • Engagement management — 13%
  • Reconnaissance and enumeration — 21%
  • Vulnerability discovery and analysis — 17%
  • Attacks and exploits — 35%
  • Post-exploitation and lateral movement — 14%

Try a free hacking lab: Recon to shell (~5 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Learn the methodology

Plan and scope an engagement legally and professionally.

1 course · 16 sections · 138 lectures

Learn

  • CourseTotal: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1
Free resources

Step 2 — Reconnaissance and scanning

Map an estate and find what is exposed.

29 labs

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — reconnaissance and scanning sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

Practise

Free resources

Step 3 — Exploitation

Turn a finding into proven impact.

26 labs

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — exploitation and attack sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

No wireless, cloud, mobile, IoT or OT labs exist yet; the course's Wireless and RF Attacks, Attacking the Cloud and Specialized and Fragile Systems sections teach them.

Practise

Free resources

Step 4 — Web application testing

Work the OWASP Top Ten by hand.

27 labs

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — web application testing sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

Practise

Free resources

Step 5 — Post-exploitation and lateral movement

Escalate, persist, move laterally and cover your tracks once you are in.

11 labs

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — Post-Exploitation section 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

Practise

Step 6 — Write the report

Turn findings into a report with risk ratings, remediation advice and an executive summary.

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — Post-Engagement Activities section 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

No report-writing lab or free report template exists yet; the course section above teaches it.

Step 7 — Scripting for testers

Automate the boring parts.

7 labs

Learn

  • CourseCovered in Total: CompTIA PenTest+ v3 (opens in a new tab)opens on courses.stationx.net — scripting and automation sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    16 sections · 138 lectures
    1. Course Overview 2
    2. Introduction to CompTIA PenTest+ (PT0-003) 3
    3. Planning and Engagement 13
    4. Information Gathering and Vulnerability Scanning 27
    5. Network-Based Attacks 9
    6. Wireless and RF Attacks 3
    7. Web and Database Attacks 15
    8. Attacking the Cloud 3
    9. Specialized and Fragile Systems 4
    10. Social Engineering and Physical Attacks 6
    11. Post-Exploitation 8
    12. Post-Engagement Activities 10
    13. Tools and Code Analysis 15
    14. Tools Inventory 18
    15. Next Steps & Certification 1
    16. Audio Version of Training 1

Practise

Free resources

Before the exam

CompTIA PenTest+ badge

Book the exam · StationX is a CompTIA Authorized Partner

Official PenTest+ exam voucher, for less than CompTIA's price

CompTIA Authorized Partner

Sold by StationX, a CompTIA Authorized Partner: you get a genuine CompTIA code by email within 1 working day (up to 5 in some countries) and sit the official exam.

  • Save 44%Exam voucher · RetakePenTest+ voucher + Retake AssuranceOne exam attempt, plus a free second attempt if you don't pass first time.$492.15 $878.00 Save $385.85Get the voucher
  • Save 15%Exam voucherPenTest+ exam voucherOne exam attempt, for the country you sit the exam in.$373.15 $439.00 Save $65.85Get the voucher

100% official CompTIA productsCode by email within 1 working day (up to 5 in some countries)Today's prices in USD; the product page shows the price for the country you sit the exam in

Where this leads

Explore free resources

Choose your next roadmap

Next level

AI-Driven Security Engineering

After this roadmap: direct AI to build real security solutions. “No coding background required. You direct the AI; the AI does the building.”

See the AI-Driven Security Engineering Master’s →