CompTIA PenTest+ · PT0-003
PenTest+ Flashcards
Learn pentest methodology, tools, and terminology. Flip through 10 real cards from our 280+ card PenTest+ deck.
10 PenTest+ terms to know
- SQLi
- Injection of malicious SQL into queries. Types: error-based, union-based, and blind (boolean/time). Automated with sqlmap; can lead to full database compromise.
- XSS
- Injection of malicious scripts into web pages. Types: stored, reflected, and DOM-based. Used to steal cookies, hijack sessions, perform keylogging, and redirect users.
- CSRF
- Attack tricking authenticated users into submitting unintended requests. Exploited via malicious links/forms; mitigated by anti-CSRF tokens and SameSite cookies.
- OSINT
- Gathering info from public sources, social media, job boards, DNS, code repos, breach databases. Core passive recon technique throughout PT0-003.
- LDAP
- Protocol for accessing directory services like AD (port 389/636). Exploited via LDAP injection; also used in BloodHound queries and AD enumeration.
- NFS
- Protocol for sharing files over a network. Misconfigured NFS (world-readable exports, no_root_squash) enables unauthorized access to sensitive file systems.
- SCADA
- ICS system monitoring and controlling industrial processes. Attacks can disrupt critical infrastructure; requires strict RoE and careful out-of-band coordination.
- DH
- Key exchange algorithm establishing a shared secret over an insecure channel. Export-grade 512-bit DH is vulnerable to Logjam downgrade attacks, and 1024-bit groups are within reach of well-funded attackers, so use 2048-bit or larger.
- SMB
- Windows file/printer sharing protocol (port 445). Heavily exploited, EternalBlue, Pass-the-Hash, NTLM relay, and CrackMapExec all target SMB.
- AD
- Microsoft's directory service for Windows networks. Pentesters target AD for privilege escalation via Kerberoasting, Pass-the-Hash, and BloodHound attack path discovery.
What's in the PenTest+ deck
PenTest+ tests your knowledge of penetration testing methodology, common attack techniques, and tool usage. Our flashcard decks cover everything from recon and exploitation to reporting, the terminology and concepts you need to pass PT0-003.
Tools & Commands
Nmap, Metasploit, Burp Suite, Wireshark flags and use cases
Attack Techniques
SQLi, XSS, buffer overflow, privilege escalation, and lateral movement
Recon & OSINT
Passive vs active recon, footprinting, OSINT sources, and enumeration
Reporting & Scoping
Rules of engagement, findings classifications, CVSS, and deliverable types
Tool Recognition Cards
PenTest+ tests tool knowledge conceptually. Cards drill what each tool does, common flags, and when to use it, no lab access needed.
Attack Scenario Cards
Scenario cards describe a situation and ask which technique or tool applies, matching the exam's scenario-heavy format.
Methodology Drills
The pentest lifecycle in order: planning, recon, scanning, exploitation, post-exploitation, reporting. Know the phases cold.
Code Snippet Cards
Basic scripting and code analysis appears on PT0-003. Cards introduce common patterns in Python, Bash, and PowerShell for recognition.
Frequently asked questions
- Do I need real hacking experience for PenTest+?
- Helpful but not required. The exam mixes multiple-choice and performance-based questions, so you need to understand how techniques and tools are applied in scenarios. CompTIA recommends 3 to 4 years of penetration testing experience. Flashcards are effective for the terminology and concept recognition the exam focuses on.
- What tools does PenTest+ expect me to know?
- Nmap, Metasploit, Burp Suite, Wireshark, Netcat, John the Ripper, and Hashcat are commonly tested. Our cards cover what each does and when to use them, not hands-on operation.
- Is scripting knowledge required for PenTest+?
- PT0-003 includes code analysis questions. You need to read and understand basic scripts, not write them from scratch. Our code snippet cards prepare you for the recognition questions.
- How is PenTest+ different from CEH?
- PenTest+ is more practical and scenario-based, while CEH is more conceptual. Both test tool knowledge. PenTest+ PT0-003 has stronger coverage of modern attack techniques and reporting.
Practice PenTest+ PBQs
Performance-based questions (PBQs) are the hands-on simulations on the real exam. Practice them in our PBQ labs.
More PenTest+ resources
Memorize PenTest+ faster
Study the full 280+ card deck with spaced repetition, plus practice questions and mock exams.
Get started