CompTIA PenTest+ Study Roadmap
Last updated: September 29, 2026
Domain Weight Distribution
Week-by-Week Study Plan
Domain 1: Planning & Scoping (Rules of engagement, Compliance, Legal considerations)
Domain 2: Passive Recon (OSINT, WHOIS, DNS enumeration, Shodan)
Domain 2: Active Recon (Nmap scanning, Vulnerability scanners, Service enumeration)
Domain 3: Network Attacks (MITM, Relay attacks, Pivoting, Lateral movement)
Domain 3: Web App Attacks (SQL injection, XSS, CSRF, SSRF, File inclusion)
Domain 3: Wireless & Cloud Attacks (Evil twin, WPA cracking, Cloud misconfigs)
Domain 4: Reporting (Findings, Risk ratings, Executive summaries, Remediation)
Domain 5: Scripting & Tools (Python, Bash, PowerShell, Metasploit, Burp Suite)
Lab Practice: Full pentest simulation, Capture the flag, Tool mastery
Full Review: Practice tests, PBQ practice, Weak areas, Exam logistics
Free Resources
Professor Messer, CertMaster Practice
Related Tools
CompTIA PenTest+ Study Guide
Complete exam objectives and domain breakdown
✅Study Tracker
Track objective completion with progress dashboard
💰Cost Calculator
Total cost breakdown and ROI analysis
🧪Practice Quiz
Test your knowledge with free practice questions
FixTheVuln Store
Get the CompTIA PenTest+ Study Planner
Fillable PDF with 10-week schedule, domain trackers, flashcard templates, and progress tracking.
Get the Study Planner ($5.99)