Course Information

  • Sessions 5 days
  • Duration 37.5 hrs
  • Level Beginner
  • Assessment NA

Venue

Kuala Lumpur: G-3A-02, Corporate Office Suite, KL Gateway, No. 2, Jalan Kerinchi, Gerbang Kerinchi Lestari, 59200 Kuala Lumpur, Malaysia

Learning Outcomes

By the end of the course, learners will be able to:

  • LO1: Plan and scope penetration tests, including rules of engagement and legal and ethical considerations.
  • LO2: Gather information and perform vulnerability scanning with tools such as Nmap and Wireshark.
  • LO3: Explain and apply network, wireless, web and database attacks and post-exploitation techniques in authorised tests.
  • LO4: Report findings and recommend mitigation strategies.
  • LO5: Use penetration testing tools and analyse code.

Course Brochure

Prerequisite

This course is for beginners. No prerequisite is required.

Certification

  • Participants who achieve at least 75% attendance will receive a Certificate of Attendance from Tertiary Courses Malaysia.

CompTIA Authorised Delivery Partner

We are an Authorised CompTIA Delivery Partner. To get the official CompTIA certification, please register your certification exam at a Pearson VUE test center.

CompTIA PenTest+ Training

Course Code: C1136
Share

What's This Course About

This CompTIA PenTest+ Exam Prep course is meticulously designed to equip learners with profound knowledge and practical skills in penetration testing and vulnerability assessment. The course begins with an in-depth exploration of planning and scoping for penetration tests, ensuring alignment with organizational goals and compliance with regulatory frameworks. Participants will learn about various aspects of a pen test, including establishing rules of engagement, managing resources and budgets, understanding legal and service provider agreements, and ethical considerations. Furthermore, the course delves into the intricacies of information gathering and vulnerability scanning, where learners will gain hands-on experience with tools like Wireshark and Nmap, and understand the nuances of both passive and active reconnaissance.

Advancing to more complex topics, the course covers a range of attacks and exploits, including network-based, wireless, web, and database attacks, as well as post-exploitation strategies. Participants will be skilled in using advanced hacking methods, identifying vulnerabilities, and tailoring test plans to combat emerging hacking techniques. The final modules focus on critical post-testing processes such as report writing, presenting findings, and recommending mitigation strategies, along with an overview of essential tools and code analysis for effective penetration testing. By the end of this course, participants will be adept at conducting authorized penetration tests, analyzing incident data, and employing advanced threat modeling techniques, fully preparing them for the CompTIA PenTest+ exam.

Bonus: Free Practice Exams

Get exam-ready on our Practice Exam Portal — train in realistic Practice Mode and timed Exam Mode, then retake them as many times as you like before the real exam.

Start Practising →

Why Take This Course?

  • Hands-On Learning Learn by doing. Every topic is practised hands-on, so you leave with skills you can use at work straight away.
  • Live Coaching Experienced instructors coach you live, answer your questions and guide you step by step.
  • Free Post-Course Consultation Stuck after class? Message your trainer any time for guidance as you apply what you have learned.
  • Always-Updated Materials Materials are refreshed to stay relevant. Log in to our LMS any time to get the latest version.
HRD Corp Claimable

🏦 HRD Corp Claimable

This course is HRD Corp claimable for eligible employers. Grant approval and reimbursement remain subject to HRD Corp requirements, the employer’s available levy and the approved grant details. How the HRD Corp process works →

Course Fee

MYR7,500.00
+ 8% SST

Course Date

Course Time

Course fees are shown before SST. An 8% SST is included in the estimated total during registration.

Additional Note

Please bring your own laptop for hands-on training. If you don't have laptop, we can provide spare laptop for training use.

Disclaimer: The course dates displayed on our website are tentative and subject to trainer availability. We will confirm the final date after checking with the trainer. You are also welcome to email us your preferred date at sales@tertiarycourses.com.my, and we will do our best to coordinate with the trainer's schedule.

Post-Course Support

  • We may provide consultation related to the subject matter after the course.
  • Please email your queries to sales@tertiarycourses.com.my and we will forward your queries to the subject matter experts and get back to you as soon as possible.

Cancellation & Reschedule Policy

  • We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% to participants.
  • Note: the venue of the training is subject to changes due to class size and availability of the classroom. The minimum class size to start a class is 3 Pax.

Course Details

Course Details

What You'll Learn

Topic 1: Planning and Scoping

Topic 2: Information Gathering and Vulnerability Scanning

Topic 3: Attacks and Exploits

Topic 4: Reporting and Communication

Topic 5: Tools and Code Analysis

Course Info

Minimum Entry Requirement

Knowledge and Skills

  • Able to operate using computer functions

Attitude

  • Positive Learning Attitude
  • Enthusiastic Learner

Minimum Software/Hardware Requirement

Software:

You will need the following for this course:

Hardware: Windows PC or Mac laptop

How to Apply HRD Corp Funding

This course is HRD Corp claimable for employers registered with HRD Corp, under the HRD Corp Claimable Courses scheme (SBL-Khas). Your company applies for the grant before the class; we submit the training provider claim after it.

  1. Check your levy balance - your company must be registered with HRD Corp and have enough levy balance to cover the course fee.
  2. Request a quotation - contact us for the quotation, course content and trainer profile; you attach these to the grant application.
  3. Apply for the grant in eTRiS before the class - log in to your employer eTRiS account, go to Application > Grant > Apply Grant, choose the scheme HRD Corp Claimable Courses (SBL-Khas), select us as the training provider and this course, add your trainees, attach the quotation, course content and trainer profile, and submit.
  4. Submit in time - for public classes, submit at least 3 calendar days before the class (15 June to 31 December 2026) and at least 14 days before from 1 January 2027; in-house classes need 14 days. The training must start within 90 days of that advance submission period.
  5. Send us the grant approval - once HRD Corp approves the application, email us the grant ID so we can confirm your seats.
  6. Attend the class - trainees sign the daily attendance (T3) form.
  7. Claim after the class - we submit the training provider claim in eTRiS with the attendance and invoice; you then complete the employer claim and sign the JD/14 form (manager level or above). Claims must be submitted within 6 months of the training.

More details: our HRD Corp Claimable Courses page and the HRD Corp employer guidelines.

Job Roles

Job Roles

  • Penetration Tester
  • Ethical Hacker
  • Cybersecurity Analyst
  • Information Security Consultant
  • Vulnerability Analyst
  • Security Operations Center (SOC) Analyst
  • Network Security Specialist
  • IT Security Engineer
  • Cybersecurity Auditor
  • Compliance and Controls Analyst
  • Incident Response Analyst
  • Forensic Analyst
  • Security Architect
  • Risk Assessment Specialist
  • Cyber Defense Analyst
  • Application Security Engineer
  • Cyber Threat Intelligence Analyst
  • IT Auditor focusing on security
  • Security Systems Administrator
  • Information Assurance Technician

Trainers

Trainers

Dr. Muhammed Siraj is a cybersecurity specialist and academic with 15 years of experience, and as a Certified Ethical Hacker he brings genuine penetration testing practice to this CompTIA PenTest+ course. At Academic City University in Accra, Ghana, he serves as Senior Lecturer in the Department of Informatics and as Director of Graduate and Continuous Education. His academic training spans three countries: a degree from the University of Ghana, an MSc in Information and Communication Technology from Aalborg University in Denmark, and a PhD in Security in Computing from Universiti Putra Malaysia, where he researched blockchain security. Beyond the university, he is a licensed independent assessor with Ghana's Cyber Security Authority and holds leadership roles in national cybersecurity and privacy professional bodies. He is a Certified Ethical Hacker (CEH), Computer Hacking Forensic Investigator (CHFI) and Certified Data Protection Supervisor (CDPS), and was formerly Acting Director of ICT and Data Protection Supervisor at Wisconsin International University College.

Penetration testing is one of Dr. Siraj's core specialisms, and he guides learners through the full engagement lifecycle examined in CompTIA PenTest+. He begins with planning and scoping, explaining rules of engagement, legal agreements and the ethical responsibilities that separate a professional tester from an attacker, points he reinforces through his work in cybersecurity policy and data protection. He then leads learners through information gathering and vulnerability scanning, attacks and exploits against networks, applications, cloud and mobile targets, and the analysis of tools and code, drawing on his expertise in vulnerability management, cloud security, mobile and endpoint security and secure software development. His experience as a Computer Hacking Forensic Investigator helps learners understand the traces their activity leaves, while his incident response background helps them write reports that defenders can act on, so that every test leads to real remediation. Having studied for his PhD at Universiti Putra Malaysia, he is pleased to work with Malaysian security professionals building their offensive testing skills.

Dr. Alfred Ang is a full-stack AI developer, agentic AI solution architect and the Chief Technology Officer of Tertiary Infotech Academy, where he leads the teams that build the academy's platforms and design its technology training. He brings the builder's perspective to PenTest+, helping learners understand how the systems they test are designed, deployed and defended. He is CompTIA Security+ certified and holds the Certificate in AI Ethics and Governance (Senior Professional) from NTU, together with AWS Certified Solutions Architect, AWS Certified AI Practitioner and AWS Certified Cloud Practitioner credentials and the Certified Kubernetes Administrator (CKA) and Certified Kubernetes Application Developer (CKAD) certifications. His experience spans system architecture, security, observability and performance optimisation, with a strong emphasis on real-world deployment. Academically, he holds a PhD in Electrical Engineering from the National University of Singapore, an MSc in Electrical and Electronic Engineering from NTU and a BSc (Hons) in Physics from NUS. Over more than 20 years he has worked in the defence, electronics and semiconductor industries, published more than 20 peer-reviewed papers, co-invented over 20 US patents and founded several technology businesses, including Tertiary Infotech Sdn. Bhd. in Malaysia in 2016. Alongside hands-on engineering, he leads agentic AI adoption and digital transformation initiatives for enterprises, building conversational AI, autonomous agents and cloud-native platforms across AWS, Kubernetes and DevOps, with security and governance designed in from the outset. His teaching emphasises applied skills, ethical governance and sustainable adoption, translating complex technology into practical, industry-aligned learning for professionals and organisations.

Dr. Ang's contribution is the defender's and builder's view of a penetration test. He built a training environment platform that runs Docker-based WordPress, Ubuntu and Kali Linux labs in the browser with role-based access, OAuth, on-demand container start and stop and idle auto-shutdown, the kind of isolated range in which learners can practise scanning and exploitation safely and legally. His production work, including a franchise platform on Docker and Coolify across Singapore, Malaysia and Ghana, hardened Content-Security-Policy websites, a published secret-scanning skill and a credential-leak guard, shows learners what well-defended targets look like and which weaknesses testers most often find, such as exposed credentials, misconfigured containers and unsafe web code. In the Tools and Code Analysis topic he draws on his full-stack development experience to help learners read scripts, understand the code behind common exploits and recognise insecure patterns. He also stresses planning and scoping, rules of engagement and clear reporting, so that findings lead to fixes. His CompTIA Security+ certification gives him common ground with learners moving into offensive security, and he encourages them to practise only on authorised targets such as dedicated lab environments, reinforcing the legal and ethical boundaries that every professional penetration tester must respect throughout an engagement, from initial scoping to the final report. Learners are welcome to explore his lab platform and other projects on GitHub at https://github.com/alfredang and connect with him on LinkedIn at https://www.linkedin.com/in/angchewhoe/

Saeid is co-founder of Skymics Sdn Bhd. He has 8 years of experience in the field of IoT (Internet of Things) and Information Technology. He is a certified IBM IoT Practitioner and instructor, and a Certified Citizen Data Scientist Train-The-Trainer. He has been co-inventor of 3 inventions during the last 4 years.

Review

Customer Reviews (8)

Very informative Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Excellent delivery and good balance between theory and practice. Learned a lot in a short time. (Posted on 05/07/2025)
Exceeded my expectations Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Solid content and a supportive trainer. I would definitely sign up for more courses here. (Posted on 26/12/2024)
Excellent course Review by Course Participant/Trainee
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment
Well organised course with clear objectives. The step-by-step approach made it easy to follow. (Posted on 28/11/2024)

Items 6 to 8 of 8 total

per page
Page:
  1. 1
  2. 2

Write Your Own Review

You're reviewing: CompTIA PenTest+ Training

How do you rate this product? *

  1 star 2 stars 3 stars 4 stars 5 stars
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment