• Home
  • CompTIA PenTest+ Training

CompTIA PenTest+ Training

Course Information

  • Sessions 5 days
  • Duration 37.5 hrs
  • Level Beginner
  • Assessment NA

Venue

Kuala Lumpur: G-3A-02, Suite Pejabat Korporat, KL Gateway, No 2, Jalan kerinchi, Gerbang kernichi Lestari, 59200 Kuala Lumpur, Malaysia
Penang: Jalan Sungai Dua, 11700 Penang, Malaysia.

Course Brochure

Download Course Brochure

Certification

  • Certificate of Achievement from Tertiary Infotech Academy Pte Ltd - Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Achievement from Tertiary Infotech Academy Pte Ltd.

CompTIA PenTest+ Training

Course Code: C1136
  • HRDF

8 Review(s) | Add Your Review

Share

What's This Course About

Our CompTIA PenTest+ Exam Prep Course is designed for cybersecurity professionals seeking to master penetration testing skills and earn the CompTIA PenTest+ certification. This comprehensive course covers all aspects of the PenTest+ exam objectives, including planning and scoping, information gathering, vulnerability identification, attacks and exploits, and reporting and communication. Through expert instruction and hands-on practice, participants will learn advanced techniques in ethical hacking and security testing, essential for identifying and addressing system vulnerabilities.

The course also emphasizes the ethical considerations and compliance standards in penetration testing, ensuring participants are not only technically proficient but also professionally responsible. With a focus on real-world scenarios and practical applications, our training prepares you for success in the CompTIA PenTest+ exam and equips you with the skills to contribute significantly to your organization's cybersecurity efforts.

Bonus: Free Practice Exams

Get exam-ready on our Practice Exam Portal — train in realistic Practice Mode and timed Exam Mode, then retake them as many times as you like before the real exam.

Start Practising →

WSQ Funding

Full Fee 7,000.00 Before GST
GST 630.00 9% of fee
Baseline Nett 4,130.00 SG/PR age 21+ · 50% funded
MCES / SME Nett 2,730.00 SG age 40+ · 70% funded
Funding and Grant Applications

No funding is available for this course

For WSQ funding, please checkout the details at WSQ - CompTIA PenTest+ Training

Course Fee

MYR7,000.00

Course Date

Course Time

Additional Note

Please bring your own laptop for hands-on training. If you don't have laptop, we can provide spare laptop for training use.

Disclaimer: The course dates displayed on our website are tentative and subject to trainer availability. We will confirm the final date after checking with the trainer. You are also welcome to email us your preferred date at sales@tertiarycourses.com.my, and we will do our best to coordinate with the trainer's schedule.

Post-Course Support

  • We may provide consultation related to the subject matter after the course.
  • Please email your queries to sales@tertiarycourses.com.my and we will forward your queries to the subject matter experts and get back to you as soon as possible.

Cancellation & Reschedule Policy

  • We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% to participants.
  • Note: the venue of the training is subject to changes due to class size and availability of the classroom. The minimum class size to start a class is 3 Pax.

Course Details

Course Details

What You'll Learn

This course prepares you for the PT0-003 certification exam, covering all official exam domains and their approximate weightings:

Domain 1 Engagement Management (13%)

  • Summarize pre-engagement activities: scope definition, rules of engagement, agreement types (NDA, MSA, SOW, ToS), target selection, shared responsibility model, legal/ethical considerations
  • Explain collaboration and communication activities: peer review, stakeholder alignment, escalation path, goal reprioritization, business impact analysis
  • Compare and contrast testing frameworks and methodologies (OSSTMM, CREST, PTES, MITRE ATT&CK, OWASP Top 10/MASVS, threat modeling frameworks DREAD/STRIDE/OCTAVE)
  • Explain the components of a penetration test report: executive summary, methodology, detailed findings, attack narrative, recommendations/remediation guidance
  • Given a scenario, analyze findings and recommend appropriate remediation (technical, administrative, operational, physical controls)

Domain 2 Reconnaissance and Enumeration (21%)

  • Given a scenario, apply information gathering techniques: active/passive reconnaissance, OSINT, DNS lookups, certificate transparency logs, network sniffing, protocol scanning
  • Given a scenario, apply enumeration techniques: OS fingerprinting, service/protocol/DNS/directory/host/share/user/email enumeration, attack path mapping
  • Given a scenario, modify scripts for reconnaissance and enumeration using Bash, Python, or PowerShell
  • Given a scenario, use appropriate tools for reconnaissance and enumeration (Nmap, theHarvester, Shodan, Maltego, Recon-ng, Amass, WHOIS, Wireshark/tcpdump)

Domain 3 Vulnerability Discovery and Analysis (17%)

  • Given a scenario, conduct vulnerability discovery using various techniques: container/application/network scans, DAST/IAST/SAST/SCA, authenticated vs. unauthenticated scans, wireless scanning, ICS vulnerability assessment
  • Given a scenario, analyze output from reconnaissance, scanning, and enumeration phases: validating results (false positives/negatives, true positives), public exploit selection, scripting to validate results
  • Explain physical security concepts: tailgating, site surveys, USB drops, badge cloning, lock picking

Domain 4 Attacks and Exploits (35%)

  • Given a scenario, analyze output to prioritize and prepare attacks: target prioritization (CVSS, CVE, CWE, EPSS), capability/tool/exploit selection, attack path and documentation
  • Given a scenario, perform network, authentication, and host-based attacks using appropriate tools (Metasploit, Hydra, Mimikatz, CrackMapExec, Impacket, hashcat)
  • Given a scenario, perform web application attacks (SQLi, XSS, SSRF, CSRF, file inclusion, JWT manipulation) using tools such as Burp Suite, ZAP, sqlmap, Gobuster
  • Given a scenario, perform cloud-based and wireless attacks using appropriate tools (Pacu, ScoutSuite, Prowler, Aircrack-ng, Kismet)
  • Given a scenario, perform social engineering attacks (phishing, vishing, pretexting) and explain attacks against specialized systems (mobile, AI/prompt injection, OT/ICS, NFC/Bluetooth)
  • Given a scenario, use scripting (PowerShell, Bash, Python) and breach-and-attack simulation tools to automate attacks

Domain 5 Post-exploitation and Lateral Movement (14%)

  • Given a scenario, perform tasks to establish and maintain persistence: scheduled tasks, service creation, reverse/bind shells, backdoors, C2 frameworks, rootkits
  • Given a scenario, perform tasks to move laterally throughout the environment: pivoting, relay creation, service/credential enumeration, WMI/WinRM, LOLBins, tools like CrackMapExec, Impacket, PsExec
  • Summarize concepts related to staging and exfiltration: file encryption/compression, covert channels (DNS, ICMP, HTTPS, steganography), cloud storage, alternate data streams
  • Explain cleanup and restoration activities: removing persistence mechanisms and tester-created credentials/tools, reverting configuration changes, secure data destruction

Course Info

Promotion Code

Your will get 10% discount voucher for 2nd course onwards if you write us a Google review.

Minimum Entry Requirement

Knowledge and Skills

  • Able to operate using computer functions
  • Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

  • Positive Learning Attitude
  • Enthusiastic Learner

Experience

  • Minimum of 1 year of working experience.

Target Age Group: 18-65 years old

Minimum Software/Hardware Requirement

Software:

TBD

Hardware: Window or Mac Laptops

Job Roles

Job Roles

  • Penetration Tester
  • Ethical Hacker
  • Cybersecurity Analyst
  • Information Security Consultant
  • Vulnerability Analyst
  • Security Operations Center (SOC) Analyst
  • Network Security Specialist
  • IT Security Engineer
  • Cybersecurity Auditor
  • Compliance and Controls Analyst
  • Incident Response Analyst
  • Forensic Analyst
  • Security Architect
  • Risk Assessment Specialist
  • Cyber Defense Analyst
  • Application Security Engineer
  • Cyber Threat Intelligence Analyst
  • IT Auditor focusing on security
  • Security Systems Administrator
  • Information Assurance Technician

Trainers

Trainers

Saeid is co-founder of Skymics Sdn Bhd. He has 8 years of experience in the field of IoT (Internet of Things) and Information Technology. He is a certified IBM IoT Practitioner and instructor, and a Certified Citizen Data Scientist Train-The-Trainer. He has been co-inventor of 3 inventions during the last 4 years.

Review

Customer Reviews (8)

Fantastic experience Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
The trainer is an expert in the subject and shared many practical insights from real projects. (Posted on 03/02/2026)
Very useful course Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Very engaging session. The trainer patiently answered all our questions and gave useful tips. (Posted on 15/09/2025)
Well structured course Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 24/08/2025)
Very useful course Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Great course materials and well-paced lessons. The exercises really helped me understand the topic. (Posted on 25/07/2025)
Very satisfied Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Really enjoyed the training. The examples were relevant and the pace was just right. (Posted on 05/07/2025)

Items 1 to 5 of 8 total

per page
Page:
  1. 1
  2. 2

Write Your Own Review

You're reviewing: CompTIA PenTest+ Training

How do you rate this product? *

  1 star 2 stars 3 stars 4 stars 5 stars
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment