All Episodes

Episode 96 — Final Exam Readiness Drill (Audio Practice)

Episode 95 — Executive Summary That Doesn’t Suck

Episode 94 — Building the Attack Narrative

Episode 93 — Cleanup and Restoration

Episode 92 — Data Handling and Evidence

Episode 91 — Staging and Exfiltration Concepts

Episode 90 — Common Lateral Paths (SMB/RDP/SSH/WinRM/WMI)

Episode 89 — Pivoting Concepts

Episode 88 — Lateral Movement Logic

Episode 87 — Credential Reuse and Expansion

Episode 86 — Persistence Families

Episode 85 — Post-Exploitation Goals

Episode 84 — Automation and BAS Concepts

Episode 83 — AI-Related Attacks (High-Level)

Episode 82 — Specialized Systems: OT, NFC, RFID, Bluetooth

Episode 81 — Mobile Attack Concepts

Episode 80 — Social Engineering Patterns

Episode 79 — Wireless Attack Patterns

Episode 78 — Cloud Attack Patterns: Storage and Metadata

Episode 77 — Cloud Attack Patterns: Identity First

Episode 76 — Web Attack Mini-Scenarios

Episode 75 — Deserialization and File Inclusion Concepts

Episode 74 — SSRF vs CSRF (And Why They Differ)

Episode 73 — Access Control Failures: IDOR and AuthZ

Episode 72 — XSS Types and Outcomes

Episode 71 — Injection Families (SQL/Command/Template)

Episode 70 — Web Attack Surface: Inputs, Auth, Sessions

Episode 69 — Host Attack Mini-Scenarios

Episode 68 — Evasion and Operational Security

Episode 67 — Living-off-the-Land Concepts

Episode 66 — Credential Access Patterns

Episode 65 — Local Privilege Escalation Patterns

Episode 64 — Auth Attack Mini-Scenarios

Episode 63 — Federation Basics: SAML and OIDC

Episode 62 — Token and Session Attacks

Episode 61 — Kerberos Concepts for the Exam

Episode 60 — MFA Bypass Patterns (Conceptual)

Episode 59 — Password Attacks: Spray vs Stuff vs Brute Force

Episode 58 — Network Attack Mini-Scenarios

Episode 57 — Service Exploitation Logic

Episode 56 — Segmentation and Trust Failures

Episode 55 — Name Resolution and Relay Concepts

Episode 54 — On-Path Attacks (Conceptual)

Episode 53 — Common Network Weakness Patterns

Episode 52 — Exploit Selection and Safety

Episode 51 — Prioritization: High Value Targets and Quick Wins

Episode 50 — Attack Planning: From Findings to a Path

Episode 49 — Vulnerability Analysis Mini-Scenarios

Episode 48 — Physical Security Techniques (Conceptual)

Episode 47 — OT/ICS Assessment Concepts (High-Level)

Episode 46 — False Positives and False Negatives

Episode 45 — Validating Findings Without Breaking Things

Episode 44 — Prioritization Cues (CVE/CVSS/CWE/EPSS)

Episode 43 — IaC and Configuration Findings

Episode 42 — Container Vulnerability Concepts

Episode 41 — Secrets Scanning Concepts

Episode 40 — Dependency and Supply Chain Findings

Episode 39 — Web/App Scanning Families

Episode 38 — Network Vulnerability Scanning Concepts

Episode 37 — Authenticated vs Unauthenticated Scanning

Episode 36 — Discovery vs Validation vs Exploitation

Episode 35 — Recon/Enum Output Interpretation Drills

Episode 34 — Scripting Concepts for Recon (Bash/Python/PowerShell)

Episode 33 — Cloud Enumeration Concepts

Episode 32 — Wireless Recon Basics

Episode 31 — Authentication Surface Enumeration

Episode 30 — Web Enumeration: Robots, Sitemaps, and Metadata

Episode 29 — Web Enumeration: Content and Paths

Episode 28 — DNS Enumeration Patterns

Episode 27 — Banner Grabbing and Fingerprinting

Episode 26 — Port/Service Scanning Concepts

Episode 25 — Host Discovery Logic

Episode 24 — OSINT: Breaches and Credential Exposure

Episode 23 — OSINT: Code and Artifact Leaks

Episode 22 — OSINT: Domains, DNS, and Internet Exposure

Episode 21 — OSINT: People and Org Footprints

Episode 20 — Active Recon Fundamentals

Episode 19 — Passive Recon Fundamentals

Episode 18 — Recon vs Enumeration

Episode 17 — Remediation Recommendations That Fit

Episode 16 — Reporting: What a Strong Report Includes

Episode 15 — MITRE ATT&CK in PenTesting Context

Episode 14 — OWASP: Top 10 and MASVS

Episode 13 — Methodologies: PTES and OSSTMM

Episode 12 — Communication During Testing

Episode 11 — Ethics and Mandatory Reporting

Episode 10 — Engagement Types and Constraints

Episode 9 — Legal Docs You Must Recognize

Episode 8 — ROE Deep Dive

Episode 7 — Scoping the Engagement

Episode 6 — Your Daily Listening Study Loop

Episode 5 — Risk Language: Severity vs Impact vs Likelihood

Episode 4 — Scope, ROE, and Staying Legal

Episode 3 — Tool Purpose Map (No Commands)

Episode 2 — The PenTest Workflow as a Timeline

Episode 1 — How PenTest+ Questions Work

Welcome to the PenTest+ Audio Course