CompTIA PenTest+ (PT0-002) Cert Prep

14h 19mIntermediate2024-06-14

Authors

Mike Meyers

Expert on CompTIA, Founder of Total Seminars, LLC

Total Seminars

Course details

CompTIA A+ is one of the world’s leading vendor-neutral certifications—with more than one million certified IT professionals to date. Get ready to take your skills to the next level and tackle the CompTIA PenTest+ (PT0-002) certification exam. Join instructor and CompTIA expert Michael Solomon as he provides a comprehensive overview of this popular IT certification, which targets midcareer cybersecurity professionals tasked with penetration testing and vulnerability management. Explore the core concepts and technical skills required to become a professionally vetted ethical hacker. By the end of this course, you’ll be ready to tackle the CompTIA PenTest+ (PT0-002) certification exam.

Note: This Total Seminars course covers the topics tested on the CompTIA A+ Core 1 (220-1101) certification exam.

Skills covered

Penetration TestingCybersecurityCert Prep

Concepts

Introduction to Ethical Hacking and CompTIA PenTest+ (PTO-002)

01 - Introduction to CompTIA PenTest+ (PT0-002)
02 - About the CompTIA PenTest+ (PT0-002) exam

1. Planning and Engagement

03 - Planning a pen test
04 - Rules of engagement
05 - Regulatory compliance
06 - Resources and budgets
07 - Impact and constraints
08 - Support resources
09 - Legal groundwork
10 - Service provider agreements
11 - Standards and methodologies, part 1
12 - Standards and methodologies, part 2
13 - Environmental and scoping considerations
14 - Ethical mindset
15 - Lab environment setup
16 - Project strategy and risk
17 - Scope vulnerabilities
18 - Compliance-based assessments

2. Information Gathering and Vulnerability Scanning

19 - Scanning and enumeration
20 - Scanning and demo
21 - Packet investigation
22 - Packet inspection demo
23 - Labtainers setup
24 - Labtainers lab - Wireshark
25 - Application and open-source resources
26 - Passive reconnaissance
27 - Active reconnaissance
28 - Vulnerability scanning
29 - Vulnerability scanning demo
30 - Labtainers lab - Network basics
31 - Labtainers lab - Nmap discovery
32 - Target considerations
33 - Analyzing scan output
34 - Nmap scoping and output options
35 - Nmap timing and performance options
36 - Prioritization of vulnerabilities
37 - Common attack techniques
38 - Automating vulnerability scans
39 - Credential attacks
40 - Labtainers lab - Password cracking
41 - Labtainers lab - Secure Sockets Layer
42 - Labtainers lab - Routing basics

4. Wireless and RF Attacks

51 - Wireless exploits, part 1
52 - Wireless exploits, part 2
53 - Antennas

5. Web and Database Attacks

54 - OWASP Top 10
55 - Application exploits, part 1
56 - SQL injection demo
57 - Labtainers lab - SQL injection
58 - Application exploits, part 2
59 - Application exploits, part 3
60 - Cross-site scripting demo
61 - Labtainers lab - Cross-site scripting
62 - Labtainers lab - Cross-site request forgery
63 - Code vulnerabilities
64 - API attacks and attack resources
65 - Privilege escalation - Linux
66 - Privilege escalation - Windows
67 - Miscellaneous privilege escalation
68 - Miscellaneous local host vulnerabilities

6. Attacking the Cloud

69 - Cloud attacks, part 1
70 - Cloud attacks, part 2

7. Specialized and Fragile Systems

71 - Mobile attacks
72 - IoT attacks
73 - Data storage and management interface attacks
74 - Virtual and containerized environment attacks
75 - Labtainers lab - Industrial control system

8. Social Engineering and Physical Attacks

76 - Pretext for a social engineering attack
77 - Remote social engineering
78 - Spear phishing demo
79 - In-person social engineering
80 - Physical security

9. Post-Exploitation

81 - Post-exploitation techniques
82 - Post-exploitation tools
83 - Network segmentation testing
84 - Persistence and stealth
85 - Detection avoidance techniques

10. Post-Engagement Activities

86 - Report writing
87 - Important components of written reports
88 - Mitigation strategies
89 - Technical and physical controls
90 - Administrative and operational controls
91 - Communication
92 - Presentation of findings
93 - Post-report activities
94 - Data destruction process

11. Tools and Code Analysis

95 - Using scripting in pen testing
96 - Bash scripting basics
97 - Bash scripting techniques
98 - PowerShell scripts
99 - Ruby scripts
100 - Python scripts
101 - Scripting languages comparison
102 - Data structures, part 1
103 - Data structures, part 2
104 - Libraries
105 - Classes
106 - Procedures and functions
107 - Perl and JavaScript

12. Tools Inventory

108 - Pen testing toolbox
109 - Using Kali Linux
110 - Scanners and credential tools
111 - Code-cracking tools
112 - Open-source research tools
113 - Wireless and web pen testing tools
114 - Remote access tools
115 - Analyzers and mobile pen testing tools
116 - Other pen testing tools
117 - Labtainers lab - Metasploit framework
118 - Labtainers lab - Wireshark packet inspection
119 - Labtainers lab - SSH