Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

CompTIA · Free, ad-free audio course

CompTIA PenTest+

A structured, audio-first learning route for CompTIA PenTest+, designed for focused review and practical understanding.

Listen to the complete course Browse 96 lessons

Hear the course trailer →

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

PUT IT INTO PRACTICE

Practice CompTIA PenTest+ concepts

Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.

50 original questionsExplanation after every answerAchievements and sharing
Open CompTIA PenTest+ PracticeSee Challenge achievements

Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.

Certification practice in the BMC Cyber Challenge

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

96 lessons available

S01E01Transcript

Getting Started

How PenTest+ Questions Work

Listen to How PenTest+ Questions Work in the CompTIA PenTest+ audio course.

Transcript availableJanuary 5, 2026
→
S01E02Transcript

Getting Started

The PenTest Workflow as a Timeline

Listen to The PenTest Workflow as a Timeline in the CompTIA PenTest+ audio course.

Transcript availableJanuary 5, 2026
→
S01E03Transcript

Getting Started

Tool Purpose Map (No Commands)

Listen to Tool Purpose Map (No Commands) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 5, 2026
→
S01E04Transcript

Getting Started

Scope, ROE, and Staying Legal

Listen to Scope, ROE, and Staying Legal in the CompTIA PenTest+ audio course.

Transcript availableJanuary 5, 2026
→
S01E06Transcript

Getting Started

Your Daily Listening Study Loop

Listen to Your Daily Listening Study Loop in the CompTIA PenTest+ audio course.

Transcript availableJanuary 5, 2026
→
S01E07Transcript

Domain 1 · Engagement Management

Scoping the Engagement

Listen to Scoping the Engagement in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E08Transcript

Domain 1 · Engagement Management

ROE Deep Dive

Listen to ROE Deep Dive in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E09Transcript

Domain 1 · Engagement Management

Legal Docs You Must Recognize

Listen to Legal Docs You Must Recognize in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E10Transcript

Domain 1 · Engagement Management

Engagement Types and Constraints

Listen to Engagement Types and Constraints in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E11Transcript

Domain 1 · Engagement Management

Ethics and Mandatory Reporting

Listen to Ethics and Mandatory Reporting in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E12Transcript

Domain 1 · Engagement Management

Communication During Testing

Listen to Communication During Testing in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E13Transcript

Domain 1 · Engagement Management

Methodologies: PTES and OSSTMM

Listen to Methodologies: PTES and OSSTMM in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E14Transcript

Domain 1 · Engagement Management

OWASP: Top 10 and MASVS

Listen to OWASP: Top 10 and MASVS in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E15Transcript

Domain 1 · Engagement Management

MITRE ATT&CK in PenTesting Context

Listen to MITRE ATT&CK in PenTesting Context in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E16Transcript

Domain 1 · Engagement Management

Reporting: What a Strong Report Includes

Listen to Reporting: What a Strong Report Includes in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E17Transcript

Domain 1 · Engagement Management

Remediation Recommendations That Fit

Listen to Remediation Recommendations That Fit in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E18Transcript

Domain 1 · Engagement Management

Recon vs Enumeration

Listen to Recon vs Enumeration in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E19Transcript

Domain 1 · Engagement Management

Passive Recon Fundamentals

Listen to Passive Recon Fundamentals in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E20Transcript

Domain 1 · Engagement Management

Active Recon Fundamentals

Listen to Active Recon Fundamentals in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E21Transcript

Domain 1 · Engagement Management

OSINT: People and Org Footprints

Listen to OSINT: People and Org Footprints in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E23Transcript

Domain 1 · Engagement Management

OSINT: Code and Artifact Leaks

Listen to OSINT: Code and Artifact Leaks in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E24Transcript

Domain 1 · Engagement Management

OSINT: Breaches and Credential Exposure

Listen to OSINT: Breaches and Credential Exposure in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E25Transcript

Domain 2 · Reconnaissance and Enumeration

Host Discovery Logic

Listen to Host Discovery Logic in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E26Transcript

Domain 2 · Reconnaissance and Enumeration

Port/Service Scanning Concepts

Listen to Port/Service Scanning Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E27Transcript

Domain 2 · Reconnaissance and Enumeration

Banner Grabbing and Fingerprinting

Listen to Banner Grabbing and Fingerprinting in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E28Transcript

Domain 2 · Reconnaissance and Enumeration

DNS Enumeration Patterns

Listen to DNS Enumeration Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E29Transcript

Domain 2 · Reconnaissance and Enumeration

Web Enumeration: Content and Paths

Listen to Web Enumeration: Content and Paths in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E31Transcript

Domain 2 · Reconnaissance and Enumeration

Authentication Surface Enumeration

Listen to Authentication Surface Enumeration in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E32Transcript

Domain 2 · Reconnaissance and Enumeration

Wireless Recon Basics

Listen to Wireless Recon Basics in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E33Transcript

Domain 2 · Reconnaissance and Enumeration

Cloud Enumeration Concepts

Listen to Cloud Enumeration Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E35Transcript

Domain 2 · Reconnaissance and Enumeration

Recon/Enum Output Interpretation Drills

Listen to Recon/Enum Output Interpretation Drills in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E36Transcript

Domain 2 · Reconnaissance and Enumeration

Discovery vs Validation vs Exploitation

Listen to Discovery vs Validation vs Exploitation in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E37Transcript

Domain 2 · Reconnaissance and Enumeration

Authenticated vs Unauthenticated Scanning

Listen to Authenticated vs Unauthenticated Scanning in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E38Transcript

Domain 2 · Reconnaissance and Enumeration

Network Vulnerability Scanning Concepts

Listen to Network Vulnerability Scanning Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E39Transcript

Domain 2 · Reconnaissance and Enumeration

Web/App Scanning Families

Listen to Web/App Scanning Families in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E40Transcript

Domain 2 · Reconnaissance and Enumeration

Dependency and Supply Chain Findings

Listen to Dependency and Supply Chain Findings in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E41Transcript

Domain 2 · Reconnaissance and Enumeration

Secrets Scanning Concepts

Listen to Secrets Scanning Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E42Transcript

Domain 2 · Reconnaissance and Enumeration

Container Vulnerability Concepts

Listen to Container Vulnerability Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E43Transcript

Domain 2 · Reconnaissance and Enumeration

IaC and Configuration Findings

Listen to IaC and Configuration Findings in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E44Transcript

Domain 2 · Reconnaissance and Enumeration

Prioritization Cues (CVE/CVSS/CWE/EPSS)

Listen to Prioritization Cues (CVE/CVSS/CWE/EPSS) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E45Transcript

Domain 2 · Reconnaissance and Enumeration

Validating Findings Without Breaking Things

Listen to Validating Findings Without Breaking Things in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E46Transcript

Domain 3 · Vulnerability Discovery and Analysis

False Positives and False Negatives

Listen to False Positives and False Negatives in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E47Transcript

Domain 3 · Vulnerability Discovery and Analysis

OT/ICS Assessment Concepts (High-Level)

Listen to OT/ICS Assessment Concepts (High-Level) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E48Transcript

Domain 3 · Vulnerability Discovery and Analysis

Physical Security Techniques (Conceptual)

Listen to Physical Security Techniques (Conceptual) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E49Transcript

Domain 3 · Vulnerability Discovery and Analysis

Vulnerability Analysis Mini-Scenarios

Listen to Vulnerability Analysis Mini-Scenarios in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E50Transcript

Domain 3 · Vulnerability Discovery and Analysis

Attack Planning: From Findings to a Path

Listen to Attack Planning: From Findings to a Path in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E52Transcript

Domain 3 · Vulnerability Discovery and Analysis

Exploit Selection and Safety

Listen to Exploit Selection and Safety in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E53Transcript

Domain 3 · Vulnerability Discovery and Analysis

Common Network Weakness Patterns

Listen to Common Network Weakness Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E54Transcript

Domain 3 · Vulnerability Discovery and Analysis

On-Path Attacks (Conceptual)

Listen to On-Path Attacks (Conceptual) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E55Transcript

Domain 3 · Vulnerability Discovery and Analysis

Name Resolution and Relay Concepts

Listen to Name Resolution and Relay Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E56Transcript

Domain 3 · Vulnerability Discovery and Analysis

Segmentation and Trust Failures

Listen to Segmentation and Trust Failures in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E57Transcript

Domain 3 · Vulnerability Discovery and Analysis

Service Exploitation Logic

Listen to Service Exploitation Logic in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E58Transcript

Domain 3 · Vulnerability Discovery and Analysis

Network Attack Mini-Scenarios

Listen to Network Attack Mini-Scenarios in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E60Transcript

Domain 3 · Vulnerability Discovery and Analysis

MFA Bypass Patterns (Conceptual)

Listen to MFA Bypass Patterns (Conceptual) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E61Transcript

Domain 3 · Vulnerability Discovery and Analysis

Kerberos Concepts for the Exam

Listen to Kerberos Concepts for the Exam in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E62Transcript

Domain 3 · Vulnerability Discovery and Analysis

Token and Session Attacks

Listen to Token and Session Attacks in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E63Transcript

Domain 3 · Vulnerability Discovery and Analysis

Federation Basics: SAML and OIDC

Listen to Federation Basics: SAML and OIDC in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E64Transcript

Domain 3 · Vulnerability Discovery and Analysis

Auth Attack Mini-Scenarios

Listen to Auth Attack Mini-Scenarios in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E65Transcript

Domain 3 · Vulnerability Discovery and Analysis

Local Privilege Escalation Patterns

Listen to Local Privilege Escalation Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E66Transcript

Domain 3 · Vulnerability Discovery and Analysis

Credential Access Patterns

Listen to Credential Access Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E67Transcript

Domain 3 · Vulnerability Discovery and Analysis

Living-off-the-Land Concepts

Listen to Living-off-the-Land Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E68Transcript

Domain 3 · Vulnerability Discovery and Analysis

Evasion and Operational Security

Listen to Evasion and Operational Security in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E69Transcript

Domain 3 · Vulnerability Discovery and Analysis

Host Attack Mini-Scenarios

Listen to Host Attack Mini-Scenarios in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E70Transcript

Domain 3 · Vulnerability Discovery and Analysis

Web Attack Surface: Inputs, Auth, Sessions

Listen to Web Attack Surface: Inputs, Auth, Sessions in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E71Transcript

Domain 3 · Vulnerability Discovery and Analysis

Injection Families (SQL/Command/Template)

Listen to Injection Families (SQL/Command/Template) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E72Transcript

Domain 3 · Vulnerability Discovery and Analysis

XSS Types and Outcomes

Listen to XSS Types and Outcomes in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E73Transcript

Domain 3 · Vulnerability Discovery and Analysis

Access Control Failures: IDOR and AuthZ

Listen to Access Control Failures: IDOR and AuthZ in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E74Transcript

Domain 4 · Attacks and Exploits

SSRF vs CSRF (And Why They Differ)

Listen to SSRF vs CSRF (And Why They Differ) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E76Transcript

Domain 4 · Attacks and Exploits

Web Attack Mini-Scenarios

Listen to Web Attack Mini-Scenarios in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E77Transcript

Domain 4 · Attacks and Exploits

Cloud Attack Patterns: Identity First

Listen to Cloud Attack Patterns: Identity First in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E79Transcript

Domain 4 · Attacks and Exploits

Wireless Attack Patterns

Listen to Wireless Attack Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E80Transcript

Domain 4 · Attacks and Exploits

Social Engineering Patterns

Listen to Social Engineering Patterns in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E81Transcript

Domain 4 · Attacks and Exploits

Mobile Attack Concepts

Listen to Mobile Attack Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E83Transcript

Domain 4 · Attacks and Exploits

AI-Related Attacks (High-Level)

Listen to AI-Related Attacks (High-Level) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E84Transcript

Domain 4 · Attacks and Exploits

Automation and BAS Concepts

Listen to Automation and BAS Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E85Transcript

Domain 4 · Attacks and Exploits

Post-Exploitation Goals

Listen to Post-Exploitation Goals in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E86Transcript

Domain 4 · Attacks and Exploits

Persistence Families

Listen to Persistence Families in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E87Transcript

Domain 4 · Attacks and Exploits

Credential Reuse and Expansion

Listen to Credential Reuse and Expansion in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E88Transcript

Domain 4 · Attacks and Exploits

Lateral Movement Logic

Listen to Lateral Movement Logic in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E89Transcript

Domain 4 · Attacks and Exploits

Pivoting Concepts

Listen to Pivoting Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E91Transcript

Domain 4 · Attacks and Exploits

Staging and Exfiltration Concepts

Listen to Staging and Exfiltration Concepts in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E92Transcript

Domain 4 · Attacks and Exploits

Data Handling and Evidence

Listen to Data Handling and Evidence in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E93Transcript

Domain 5 · Post-Exploitation and Reporting

Cleanup and Restoration

Listen to Cleanup and Restoration in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E94Transcript

Domain 5 · Post-Exploitation and Reporting

Building the Attack Narrative

Listen to Building the Attack Narrative in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E95Transcript

Domain 5 · Post-Exploitation and Reporting

Executive Summary That Doesn’t Suck

Listen to Executive Summary That Doesn’t Suck in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→
S01E96Transcript

Domain 5 · Post-Exploitation and Reporting

Final Exam Readiness Drill (Audio Practice)

Listen to Final Exam Readiness Drill (Audio Practice) in the CompTIA PenTest+ audio course.

Transcript availableJanuary 6, 2026
→

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.

Related Cyber Wiki

Continue with the concepts behind the course.

AI workforce governance

AI Literacy and Training

AI literacy and training give each stakeholder enough role-specific knowledge to use, build, supervise, procure, govern, or challenge AI responsibly.

AI audit

AI-Assisted Audit Governance

AI-assisted audit governance establishes approved uses, boundaries, validation, confidentiality, accountability, and documentation when auditors use AI tools.

API security

API Token Scope Design

API token scope design grants an automation client only the operations, resources, environments, and duration needed for its approved purpose.

Authorization

Access Control Lists on Hosts

Host access control lists extend basic owner-group-other permissions with named user and group entries, default inheritance, and more precise authorization for shared files and directories.

Exposure management

Attack Surface Management

Attack surface management identifies and tracks the systems, services, identities, data paths, and external dependencies that an attacker could reach or influence.

Agile delivery

Backlog Prioritization

Backlog prioritization orders work using value, urgency, risk, learning, dependencies, cost of delay, capacity, and strategic commitments.