Certified: The CompTIA PenTest+ (Plus) Audio Course

This episode teaches injection as a single core idea, untrusted input becomes an unintended instruction, then breaks that idea into the most common families you must distinguish in scenarios. You’ll learn how SQL injection manipulates database queries, how command injection triggers operating system execution, and how template injection abuses server-side rendering logic, with a focus on clue patt...

This episode builds a structured understanding of web attack surface by focusing on inputs, identity flows, session handling, and authorization boundaries, which together explain most real-world web failures. You’ll learn how user-controlled inputs appear in parameters, headers, forms, and uploads, how authentication flows include login, MFA, reset, and SSO entry points, and how sessions and token...

This episode uses short host-focused scenarios to practice choosing the best next step after initial access, when decisions about enumeration, escalation, and credential handling must be made carefully. You’ll apply a drill method that starts by identifying your current privilege level and constraints, then selects the smallest action that increases capability or certainty without creating unneces...

This episode explains evasion and operational security as disciplined choices that manage risk, detection, and stability, rather than as a goal of being sneaky for its own sake. You’ll learn how noisy actions like rapid probing, repeated authentication attempts, and broad scanning create signals and can trigger controls or disrupt services, and how slower, narrower validation often produces better...

This episode teaches you to recognize living-off-the-land behavior as a risk pattern where legitimate built-in tools are used to achieve harmful outcomes with lower visibility. You’ll learn why these techniques matter, how normal administrative utilities and scripting environments can be repurposed for discovery, credential access, persistence, and lateral movement, and why defenders struggle to d...

This episode explains how credentials are discovered and why credential access is often the turning point from limited access to broad compromise. You’ll learn common places credentials appear, including memory-resident artifacts, configuration stores, browser and application caches, scripts, logs, and service accounts, and how tokens and sessions function as credentials even when passwords are un...

This episode teaches you to recognize common local privilege escalation patterns that turn standard user access into elevated control on the same host, using scenario cues rather than tool syntax. You’ll learn how misconfigured services, weak file and directory permissions, unsafe defaults, and poorly managed scheduled tasks create escalation opportunities, and why these weaknesses often appear af...

This episode uses short identity-focused scenarios to build speed and accuracy in selecting the best action when multiple authentication explanations seem plausible. You’ll apply a consistent drill method that identifies the flow type, policy constraints, and the most likely weakness, then selects the smallest safe validation step that increases certainty. We’ll cover scenario patterns involving l...

This episode explains federated authentication so SSO scenarios become straightforward rather than confusing acronym puzzles. You’ll learn the core roles in federation, where an identity provider authenticates the user and a service provider consumes trusted claims to grant access, and how assertions and tokens carry identity attributes, group memberships, and authorization context. We’ll cover ho...

This episode teaches you to reason about sessions and tokens as portable trust, which is why many identity scenarios involve replay and session persistence rather than password guessing. You’ll learn how sessions represent ongoing authenticated state and how tokens grant repeated access to resources, then explore how insecure storage, interception, logs, and client-side leakage can expose these ar...

This episode explains Kerberos in practical, scenario-friendly terms so you can recognize when ticket-based authentication and trust relationships drive the best answer. You’ll learn Kerberos as a centralized, ticket-based system where temporary proofs of identity replace repeated password use, and how roles like the client, services, and the ticket authority interact to grant access. We’ll cover...

This episode explains how multi-factor authentication can fail in practice through workflow weaknesses, misconfigurations, and human factors, and how to recognize these patterns from scenario descriptions. You’ll learn conceptual bypass themes such as fatigue attacks that pressure users into approving prompts, session weaknesses where stolen sessions reduce the value of MFA, recovery flows that be...

This episode teaches you to differentiate password spraying, credential stuffing, and brute force attempts based on context, risk, and the protections in place, so you can choose the correct method in scenario questions without confusing the terms. You’ll learn credential stuffing as reuse of known username and password pairs across services, password spraying as trying a small set of likely passw...

This episode uses short network-focused scenarios to build speed and accuracy in choosing the next best action when evidence is limited and constraints matter. You’ll learn a repeatable drill method that starts by identifying the key clue, naming the phase and constraint, and selecting the smallest test that increases certainty or demonstrates impact safely. We’ll cover scenario patterns involving...

This episode teaches exploitation logic as a disciplined decision process that starts with evidence and constraints, not with tools and excitement. You’ll learn how to evaluate whether a service is reachable, whether the suspected weakness matches the service condition, and what proof is appropriate under safety and authorization requirements. We’ll cover common weakness types such as misconfigura...

This episode focuses on how weak segmentation and overly broad trust relationships turn a small foothold into broad access, and how to recognize these failures from scenario clues. You’ll learn how segmentation should restrict reachability, how trust relationships can be necessary but dangerous, and how common failure patterns like flat networks, permissive rules, shared admin accounts, and misali...

This episode teaches you how name resolution confusion and authentication relay behaviors can enable credential capture or reuse, and how these scenarios differ from brute force guessing. You’ll learn how name resolution works at a practical level, how spoofing can redirect requests, and how relay behavior forwards authentication attempts to real services in a way that can result in unintended acc...

This episode explains on-path attacks as scenarios where an attacker positions themselves between communicating parties to observe, redirect, or manipulate traffic without directly owning either endpoint. You’ll learn the prerequisites that make on-path attacks feasible, such as shared network segments, weak trust boundaries, and configuration gaps, and how encryption changes what can and cannot b...

This episode teaches you to recognize recurring network weaknesses that frequently lead to compromise, using scenario cues that point to misconfiguration, poor hygiene, and weak access controls. You’ll learn how exposed management services, permissive segmentation, unnecessary service exposure, outdated platforms, and default or shared credentials create high-probability attack paths. We’ll cover...

This episode focuses on selecting proof methods that demonstrate risk while protecting stability, confidentiality, and engagement boundaries. You’ll learn how to decide when validation is sufficient and when controlled exploitation is justified, and how to evaluate exploitation options based on prerequisites, reliability, potential side effects, detection likelihood, and operational sensitivity. W...

This episode teaches you to prioritize actions that produce the most leverage, so you consistently choose the next step that reduces risk fastest under realistic constraints. You’ll learn how to identify high value targets such as identity systems, administrative interfaces, sensitive data stores, and systems that control access for many others, and how to recognize quick wins that confirm exposur...

This episode teaches you how to transform discovered and validated weaknesses into a controlled attack plan that stays within rules of engagement and produces meaningful, defensible outcomes. You’ll learn how to choose an initial foothold based on exposure, feasibility, and objective alignment, then chain steps logically so each action increases capability, reduces uncertainty, or demonstrates imp...

This episode builds decision-making speed by using short, realistic scenarios that require you to interpret limited evidence, choose a safe next step, and justify why alternatives are wrong. You’ll learn a consistent drill approach that starts by identifying the phase, asset type, and constraints, then focuses on selecting the smallest action that increases certainty or supports defensible reporti...

This episode explains how physical access and human behavior can bypass technical controls, and how physical techniques appear in scenario questions as risk indicators and control gaps. You’ll learn common concepts such as tailgating, badge misuse, unsecured doors, poor visitor controls, unattended terminals, exposed ports, and insecure storage, along with the social dynamics that make these weakn...

This episode introduces industrial and operational technology assessment concepts where safety and availability constraints dominate decision-making. You’ll learn what OT and ICS environments are in plain terms, why outages can cause real-world harm, and how legacy devices, fragile protocols, and limited patch windows change what “best” looks like compared to typical IT environments. We’ll cover s...