CompTIA · Free, ad-free audio course
A structured, audio-first learning route for CompTIA PenTest+, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
96 lessons available
Getting Started
Listen to How PenTest+ Questions Work in the CompTIA PenTest+ audio course.
Getting Started
Listen to The PenTest Workflow as a Timeline in the CompTIA PenTest+ audio course.
Getting Started
Listen to Tool Purpose Map (No Commands) in the CompTIA PenTest+ audio course.
Getting Started
Listen to Scope, ROE, and Staying Legal in the CompTIA PenTest+ audio course.
Getting Started
Listen to Risk Language: Severity vs Impact vs Likelihood in the CompTIA PenTest+ audio course.
Getting Started
Listen to Your Daily Listening Study Loop in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Scoping the Engagement in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to ROE Deep Dive in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Legal Docs You Must Recognize in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Engagement Types and Constraints in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Ethics and Mandatory Reporting in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Communication During Testing in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Methodologies: PTES and OSSTMM in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to OWASP: Top 10 and MASVS in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to MITRE ATT&CK in PenTesting Context in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Reporting: What a Strong Report Includes in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Remediation Recommendations That Fit in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Recon vs Enumeration in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Passive Recon Fundamentals in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to Active Recon Fundamentals in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to OSINT: People and Org Footprints in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to OSINT: Domains, DNS, and Internet Exposure in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to OSINT: Code and Artifact Leaks in the CompTIA PenTest+ audio course.
Domain 1 · Engagement Management
Listen to OSINT: Breaches and Credential Exposure in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Host Discovery Logic in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Port/Service Scanning Concepts in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Banner Grabbing and Fingerprinting in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to DNS Enumeration Patterns in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Web Enumeration: Content and Paths in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Web Enumeration: Robots, Sitemaps, and Metadata in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Authentication Surface Enumeration in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Wireless Recon Basics in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Cloud Enumeration Concepts in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Scripting Concepts for Recon (Bash/Python/PowerShell) in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Recon/Enum Output Interpretation Drills in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Discovery vs Validation vs Exploitation in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Authenticated vs Unauthenticated Scanning in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Network Vulnerability Scanning Concepts in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Web/App Scanning Families in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Dependency and Supply Chain Findings in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Secrets Scanning Concepts in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Container Vulnerability Concepts in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to IaC and Configuration Findings in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Prioritization Cues (CVE/CVSS/CWE/EPSS) in the CompTIA PenTest+ audio course.
Domain 2 · Reconnaissance and Enumeration
Listen to Validating Findings Without Breaking Things in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to False Positives and False Negatives in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to OT/ICS Assessment Concepts (High-Level) in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Physical Security Techniques (Conceptual) in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Vulnerability Analysis Mini-Scenarios in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Attack Planning: From Findings to a Path in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Prioritization: High Value Targets and Quick Wins in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Exploit Selection and Safety in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Common Network Weakness Patterns in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to On-Path Attacks (Conceptual) in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Name Resolution and Relay Concepts in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Segmentation and Trust Failures in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Service Exploitation Logic in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Network Attack Mini-Scenarios in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Password Attacks: Spray vs Stuff vs Brute Force in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to MFA Bypass Patterns (Conceptual) in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Kerberos Concepts for the Exam in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Token and Session Attacks in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Federation Basics: SAML and OIDC in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Auth Attack Mini-Scenarios in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Local Privilege Escalation Patterns in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Credential Access Patterns in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Living-off-the-Land Concepts in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Evasion and Operational Security in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Host Attack Mini-Scenarios in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Web Attack Surface: Inputs, Auth, Sessions in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Injection Families (SQL/Command/Template) in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to XSS Types and Outcomes in the CompTIA PenTest+ audio course.
Domain 3 · Vulnerability Discovery and Analysis
Listen to Access Control Failures: IDOR and AuthZ in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to SSRF vs CSRF (And Why They Differ) in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Deserialization and File Inclusion Concepts in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Web Attack Mini-Scenarios in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Cloud Attack Patterns: Identity First in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Cloud Attack Patterns: Storage and Metadata in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Wireless Attack Patterns in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Social Engineering Patterns in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Mobile Attack Concepts in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Specialized Systems: OT, NFC, RFID, Bluetooth in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to AI-Related Attacks (High-Level) in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Automation and BAS Concepts in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Post-Exploitation Goals in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Persistence Families in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Credential Reuse and Expansion in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Lateral Movement Logic in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Pivoting Concepts in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Common Lateral Paths (SMB/RDP/SSH/WinRM/WMI) in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Staging and Exfiltration Concepts in the CompTIA PenTest+ audio course.
Domain 4 · Attacks and Exploits
Listen to Data Handling and Evidence in the CompTIA PenTest+ audio course.
Domain 5 · Post-Exploitation and Reporting
Listen to Cleanup and Restoration in the CompTIA PenTest+ audio course.
Domain 5 · Post-Exploitation and Reporting
Listen to Building the Attack Narrative in the CompTIA PenTest+ audio course.
Domain 5 · Post-Exploitation and Reporting
Listen to Executive Summary That Doesn’t Suck in the CompTIA PenTest+ audio course.
Domain 5 · Post-Exploitation and Reporting
Listen to Final Exam Readiness Drill (Audio Practice) in the CompTIA PenTest+ audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Cyber Wiki
AI literacy and training give each stakeholder enough role-specific knowledge to use, build, supervise, procure, govern, or challenge AI responsibly.
AI auditAI-assisted audit governance establishes approved uses, boundaries, validation, confidentiality, accountability, and documentation when auditors use AI tools.
API securityAPI token scope design grants an automation client only the operations, resources, environments, and duration needed for its approved purpose.
AuthorizationHost access control lists extend basic owner-group-other permissions with named user and group entries, default inheritance, and more precise authorization for shared files and directories.
Exposure managementAttack surface management identifies and tracks the systems, services, identities, data paths, and external dependencies that an attacker could reach or influence.
Agile deliveryBacklog prioritization orders work using value, urgency, risk, learning, dependencies, cost of delay, capacity, and strategic commitments.
