Chapter 4 of 5 · CompTIA PenTest+ PT0-003
Attacks and Exploits
Network, authentication, host, web, cloud and AI attacks, with indicators and defences for each.
- 10topics
- 49 minfast track
- 35%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Network AttacksRecognise network attack categories: VLAN hopping, on-path attacks such as ARP and DNS spoofing, and service exploitation, with…6 min
- 2Authentication AttacksTell apart brute force, password spraying, credential stuffing, pass-the-hash and Kerberos ticket attacks, with log indicators…5 min
- 3Host-Based AttacksUnderstand privilege escalation, process injection and credential dumping on Windows and Linux hosts, with indicators, tool…6 min
- 4Web Application AttacksRecognise SQL injection, cross-site scripting, directory traversal and other OWASP Top 10 web flaws, their log indicators and…6 min
- 5Cloud-Based AttacksLearn the cloud attack categories on the PenTest+ exam: container escapes, metadata service abuse and IAM misconfiguration, with…5 min
- 6Attacks on AI SystemsUnderstand prompt injection, data poisoning, model extraction, adversarial inputs and other attacks on AI and LLM systems, with…5 min
- 7Social Engineering AttacksRecognise social engineering attack types such as phishing, vishing, tailgating and watering hole, their indicators, the common…4 min
- 8Wireless AttacksRecognise wireless attack categories such as evil twin, deauthentication, WPS PIN and captive portal attacks, with their…4 min
- 9Attacks on Specialized SystemsUnderstand attacks on mobile, operational technology and short-range wireless systems: concepts, indicators, named tools and the…4 min
- 10Scripting and Attack AutomationLearn how testers automate attack tasks with PowerShell, Bash and Python modules, and what breach and attack simulation tools…4 min
About this chapter
What this chapter covers
This chapter is about attack categories: how to recognise each one, what it targets, how it shows up in logs and how it is stopped. It follows the fourth domain of the CompTIA PenTest+ PT0-003 outline.
It stays at the level of concepts and exam objectives. You will not find step-by-step instructions or working exploit code, because the exam tests recognition, tool purpose and remediation.
It has six outline topics, and each has its own page.
How the topics fit together
The pages move from the network to the host to the application layer and then to newer platforms.
- Network attacks abuse switching, name resolution and exposed services.
- Authentication attacks guess, reuse or replay credentials.
- Host-based attacks raise privileges, hide in processes and dump credentials.
- Web application attacks exploit unsafe handling of input and access.
- Cloud-based attacks abuse containers, metadata services and identity permissions.
- AI attacks manipulate prompts, training data and models.
For every attack, learn three things together: how it looks in logs, which tool or technique is typical, and which control stops it.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try to match each short scenario to its attack category before reading the answer. The exam often describes symptoms and asks for the attack name or the best fix.
Ready for more practice?
The full CompTIA PenTest+ PT0-003 question bank has 653 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.