Logo
Get Protected

Certified Ethical Hacker v13 – Materials

Uncategorized
Wishlist Share

About Course

The Certified Ethical Hacker (CEH) course by EC-Council is designed to provide students with the knowledge and skills necessary to understand and detect weaknesses in systems and networks through ethical hacking techniques. The course covers a wide range of cybersecurity topics, emphasizing the tools and methodologies hackers use to breach security defenses.

Key Features:

  • Comprehensive Overview: The CEH course provides an in-depth understanding of the latest hacking tools, techniques, and methodologies from an ethical hacker’s perspective.
  • Hands-On Labs: The course includes practical lab sessions, allowing students to simulate real-world hacking techniques in a controlled environment.
  • Hacking Techniques: Focus on areas such as footprinting, scanning, enumeration, system hacking, malware threats, social engineering, and web application hacking.
  • Security Controls: Students learn to implement security measures to safeguard systems from potential attacks.
  • Industry Standard: The course aligns with the latest standards set by global organizations and is updated regularly to include the most recent threats and vulnerabilities.

Topics Covered:

  1. Introduction to Ethical Hacking
  2. Footprinting and Reconnaissance
  3. Scanning Networks
  4. Enumeration
  5. Vulnerability Analysis
  6. System Hacking
  7. Malware Threats
  8. Sniffing
  9. Social Engineering
  10. Denial of Service
  11. Session Hijacking
  12. Hacking Web Applications
  13. Hacking Wireless Networks
  14. Hacking Mobile Platforms
  15. Evading IDS, Firewalls, and Honeypots
  16. Cloud Computing
  17. Cryptography

Target Audience:

  • Security professionals
  • Network administrators
  • Penetration testers
  • Auditors
  • Security officers

The CEH certification validates the ability to think and act like a hacker, making it a vital credential for those seeking roles in penetration testing, ethical hacking, and security analysis.

Show More

What Will You Learn?

  • This course provides in-depth training in ethical hacking methodologies aligned with real-world offensive and defensive operations. CEH v13 is designed to help students understand how hackers think, act, and exploit vulnerabilities—so they can protect systems more effectively. From reconnaissance to exploitation and post-exploitation tactics, learners will gain hands-on experience using industry-standard tools and techniques in fully interactive labs.
  • 🧠 What Will I Learn?
  • Understand the hacker mindset and the five phases of ethical hacking
  • Master footprinting and reconnaissance using OSINT and advanced tools
  • Perform network scanning, enumeration, and vulnerability mapping
  • Exploit system and web application vulnerabilities
  • Use malware analysis and sniffing techniques for deeper insight
  • Conduct privilege escalation and post-exploitation tasks
  • Learn social engineering tactics used in real attacks
  • Evade firewalls, IDS/IPS, and cover digital tracks
  • Apply cloud and IoT hacking techniques in modern infrastructure
  • Prepare for CEH certification and launch a career in ethical hacking

Course Content

Module 1 – Introduction to Ethical Hacking
✅ Module Description: This foundational module introduces students to the world of ethical hacking from a professional cybersecurity perspective. Learners will explore the core concepts, terminology, and methodologies that define ethical hacking in modern cybersecurity operations. The module sets the stage for understanding how hackers think and operate, the legal and professional frameworks surrounding penetration testing, and the tools and phases used in ethical hacking engagements. By the end of this module, students will gain clarity on the role of an ethical hacker in protecting digital infrastructure and will be ready to deep dive into the technical phases of reconnaissance, scanning, enumeration, exploitation, and post-exploitation in later modules. 🎯 Learning Objectives: Understand what ethical hacking is and why it’s vital in today’s threat landscape Identify the differences between black hat, white hat, and gray hat hackers Learn the five phases of ethical hacking (Reconnaissance, Scanning, Gaining Access, Maintaining Access, and Covering Tracks) Explore the legal implications, standards, and policies guiding ethical hacking Recognize the importance of hacker mindset in proactive defense strategies 🛠️ Professional Relevance: Students will start building the mindset and foundation needed to become penetration testers, red team members, or offensive security professionals. The module aligns with real-world job functions and prepares learners to responsibly apply hacking techniques for defensive purposes.

  • 1.1 Information Security Concepts
  • 1.2 Hacking Concepts
  • 1.3 Ethical Hacking Concepts
  • 1.4 Hacking Methodologies and Frameworks
  • 1.5 Information Security Control
  • 1.6 Information Security Laws and Standards
  • Knowledge Check

Module 2 – Footprinting and Reconnaissance
✅ Module Description: In this module, students dive into the first phase of ethical hacking: Footprinting and Reconnaissance. This critical step lays the groundwork for any successful penetration test or real-world attack by collecting detailed information about the target. Students will learn how attackers gather publicly accessible data (passive reconnaissance) and directly interact with systems to extract more insights (active reconnaissance). They'll explore tools and techniques used to map networks, identify entry points, and understand the attack surface — all while staying within legal and ethical boundaries. This module trains students to think like adversaries in order to better defend digital environments. 🎯 Learning Objectives: Define footprinting and explain its purpose in the ethical hacking lifecycle Differentiate between passive and active reconnaissance Use OSINT (Open-Source Intelligence) techniques to gather information from public sources Explore DNS footprinting, WHOIS lookups, website enumeration, and email harvesting Understand social engineering and physical reconnaissance tactics Document footprinting results for professional red team reporting 🧠 Tools & Techniques Covered: Maltego, Recon-ng, theHarvester, Shodan, Google Dorking WHOIS databases, DNS interrogation tools, public record mining LinkedIn and social media analysis for attacker profiling Web server information extraction and metadata discovery 🛡️ Professional Relevance: Footprinting is the foundation of offensive and defensive cybersecurity strategy. By mastering reconnaissance, students develop the ability to predict attacker movements, build effective countermeasures, and design resilient infrastructure. Whether on a red team or blue team, this module is essential for understanding how information can be weaponized.

Module 3 – Scanning Networks
✅ Module Description: This module introduces students to the Scanning phase of ethical hacking, where information gathered during reconnaissance is actively validated. Scanning allows attackers—and ethical hackers—to detect live hosts, open ports, running services, and potential vulnerabilities in the target environment. Students will learn how to use industry-standard tools to perform network discovery, port scanning, OS fingerprinting, and vulnerability mapping. The module emphasizes how each scan type plays a role in simulating real-world attacks and in strengthening cybersecurity posture through proper defense mechanisms. 🎯 Learning Objectives: Understand the purpose of network scanning in the hacking lifecycle Differentiate between types of scanning: ping sweeps, port scanning, service enumeration Perform TCP, UDP, and stealth scans using tools like Nmap Identify live hosts, open ports, and running services on a network Learn techniques like banner grabbing, OS detection, and vulnerability scanning Analyze scan results and correlate findings with potential attack vectors 🧠 Tools & Techniques Covered: Nmap, Zenmap, Netcat, Hping3, Masscan, Nessus (intro only) SYN, FIN, NULL, Xmas, and ACK scan techniques OS fingerprinting (active vs passive) Service version detection and banner grabbing Firewall and IDS evasion basics (without exploitation) 🛡️ Professional Relevance: Network scanning bridges the gap between information gathering and exploitation. For red team professionals, it provides attack surface visibility. For blue teams, understanding scanning methods helps in detecting reconnaissance attempts and setting up network-based defenses (e.g., firewalls, IDS/IPS). This module prepares students to move from theoretical learning to practical engagement with real-world networks.

Module 4 – Enumeration
✅ Module Description: Enumeration is the final phase of pre-attack intelligence gathering, where ethical hackers actively extract detailed information from discovered systems. This module teaches students how attackers probe network services to retrieve usernames, system names, shares, policies, and more—all essential for crafting targeted exploits. Students will explore how enumeration differs from general scanning, focusing on interaction with live systems to uncover actionable data. By understanding the techniques used during enumeration, learners will be able to recognize potential weaknesses in exposed services and strengthen defenses accordingly. 🎯 Learning Objectives: Define enumeration and distinguish it from reconnaissance and scanning Understand common enumeration protocols: NetBIOS, SNMP, LDAP, SMTP, NFS, SMB, and RPC Enumerate users, groups, network resources, shares, and system banners Perform enumeration on Windows and Linux systems Analyze enumeration results for vulnerability exposure and attack planning 🧠 Tools & Techniques Covered: Nmap scripts, enum4linux, SNMPWalk, LDAP enumeration tools, rpcclient SMTP and DNS enumeration via nslookup, dig, and manual interaction SMB enumeration and share discovery Brute-force username guessing and login attempts Active Directory enumeration basics 🛡️ Professional Relevance: Enumeration reveals the inner workings of a system or domain—knowledge often used to escalate privileges or move laterally. For red teamers, this phase sets the stage for exploitation. For blue teamers, it emphasizes the need to secure exposed services, apply least privilege principles, and monitor for suspicious querying behavior. Mastering enumeration gives students insight into attacker logic and sharpens their ability to defend complex systems from within.

Module 5 – Vulnerability Analysis
✅ Module Description: In this module, students will explore the Vulnerability Analysis phase of ethical hacking. This phase comes after enumeration and is essential to identify known security weaknesses in systems, applications, and network services. Learners will be introduced to vulnerability scanning tools, frameworks, and methodologies used by real-world ethical hackers to detect misconfigurations, missing patches, outdated software, and exploitable flaws. The goal is not only to find vulnerabilities but to understand how to classify, prioritize, and report them based on business risk. This module helps students sharpen their assessment skills and prepare for safe and structured exploitation in the next phase. 🎯 Learning Objectives: Understand what a vulnerability is and how it differs from threats and exploits Learn the vulnerability assessment process and types (active, passive, credentialed, uncredentialed) Discover how to identify, scan, validate, and prioritize vulnerabilities Learn about Common Vulnerabilities and Exposures (CVE) and vulnerability scoring systems like CVSS Analyze vulnerability scan results and link them to potential attack paths Understand ethical and legal considerations when reporting vulnerabilities 🧠 Tools & Techniques Covered: Nessus, OpenVAS, Nexpose, Qualys, and other vulnerability scanners Nikto, Burp Suite (Basic Scanner) for web vulnerability detection Exploit-DB, NVD, CVE feeds, and SecurityFocus Manual validation techniques to confirm findings Reporting templates and guidelines for ethical disclosures 🛡️ Professional Relevance: Vulnerability analysis is a critical skill for ethical hackers, red teams, penetration testers, and blue team defenders. This module equips students with the ability to map an organization’s weak points before they are exploited by real attackers, and prepare remediation strategies that reduce overall risk exposure. It also lays the groundwork for the next stage of the CEH lifecycle—System Hacking.

Module 6 – System Hacking
✅ Module Description: This module immerses students in the System Hacking phase—where the ethical hacker moves from identification to real exploitation. Building on the vulnerabilities discovered earlier, students will learn how attackers gain unauthorized access to systems, escalate privileges, maintain persistence, and clear tracks to avoid detection. Through hands-on labs and guided walkthroughs, students will simulate real-world attack scenarios using professional techniques and tools. The emphasis is on understanding each attack vector, recognizing signs of compromise, and developing defensive countermeasures. This is one of the most powerful and practical modules in the CEH path. 🎯 Learning Objectives: Understand the system hacking process: Gaining Access, Escalating Privileges, Maintaining Access, and Covering Tracks Learn how to crack passwords, exploit services, and bypass authentication mechanisms Perform privilege escalation on Windows and Linux systems Use keyloggers, rootkits, and spyware in a controlled lab environment Learn how attackers hide payloads, install backdoors, and evade detection Analyze logs and system behavior to identify attacker activity 🧠 Tools & Techniques Covered: Mimikatz, Metasploit, Hydra, John the Ripper, Cain & Abel Netcat, PsExec, PowerShell Empire, Keyloggers, LSASS memory dumping Credential harvesting, NTLM/LM hash attacks, SAM database extraction Rootkits, steganography tools, and anti-forensics techniques Audit log tampering, clearing event logs, and hiding malware artifacts 🛡️ Professional Relevance: This module trains students to think and act like an attacker in order to understand the tactics used against enterprise systems. By practicing these techniques in a safe environment, students gain the experience needed to: Detect system compromise, Harden systems against real-world threats, and Contribute to red team or blue team operations. Whether you're aspiring to be a penetration tester or a SOC analyst, mastering system hacking is essential to building full-spectrum cybersecurity skills.

Module 7 – Malware Threats
✅ Module Description: This module focuses on Malware Threats—one of the most dangerous tools in a hacker’s arsenal. Students will explore the different types of malware, how they are delivered, and how they operate once inside a system. From viruses and worms to ransomware and trojans, learners will understand how malware is designed, deployed, and managed in both targeted and mass-scale attacks. The module also covers malware analysis techniques, real-world case studies, and hands-on labs that simulate infection, propagation, and detection. Students will gain insight into how attackers use malware for persistence, surveillance, data theft, and destruction. 🎯 Learning Objectives: Understand what malware is and the differences between viruses, worms, trojans, ransomware, spyware, and fileless malware Learn how malware is created, packaged, and distributed (via droppers, binders, and exploits) Explore real-world malware infection techniques, including phishing, USB drop, drive-by downloads, and malvertising Analyze malware behavior using basic static and dynamic analysis tools Understand malware evasion techniques such as obfuscation, encryption, polymorphism, and sandbox detection Learn how to detect and respond to malware incidents effectively 🧠 Tools & Techniques Covered: VirusTotal, Any.Run, Hybrid Analysis (sandbox environments) PEStudio, Process Hacker, Autoruns, ProcMon, Wireshark Basic use of IDA Free, Ghidra, and strings for static analysis Malware unpacking and behavior monitoring Examples of real ransomware payloads and keyloggers (in safe labs) 🛡️ Professional Relevance: Understanding malware is essential for ethical hackers, incident responders, SOC analysts, and anyone in the cybersecurity field. This module gives students practical exposure to how malware operates and spreads, preparing them to: Detect early signs of compromise, Perform malware triage and analysis, Build stronger defenses against emerging threats. Malware is at the heart of most modern cyberattacks—this module turns fear into readiness.

Module 8 – Sniffing
✅ Module Description: In this module, students will explore the world of Sniffing attacks, where malicious actors intercept, monitor, and capture data flowing through a network. Learners will understand how attackers use sniffing tools to gather sensitive information such as usernames, passwords, session tokens, and even unencrypted communications. Students will dive into packet-level analysis, learning how data travels over a network and how to capture and interpret that data using professional tools. The module also covers ARP spoofing, MAC flooding, DHCP attacks, and other techniques used to poison or manipulate network traffic. Through safe, hands-on labs, students will simulate sniffing attacks and practice identifying and preventing them using proper security controls. 🎯 Learning Objectives: Understand what sniffing is and how it enables data interception Learn about promiscuous vs non-promiscuous mode network cards Capture and analyze network packets, protocols, and credentials Perform ARP spoofing, DNS spoofing, and MAC flooding Understand the risks of hub-based, switch-based, and wireless sniffing Explore methods for detecting and preventing sniffing attacks 🧠 Tools & Techniques Covered: Wireshark – deep packet inspection and analysis Tcpdump and TShark for command-line capture Cain & Abel, Ettercap, Bettercap – for ARP and DNS spoofing Nmap and SniffJoke – for sniffing detection and evasion Netcut, MITMf, Responder – for sniffing and man-in-the-middle attacks Analysis of clear-text protocols: HTTP, FTP, Telnet, SMTP 🛡️ Professional Relevance: Sniffing is a common and dangerous technique used by attackers during network reconnaissance and post-compromise surveillance. This module equips ethical hackers and defenders with the skills to: Detect sniffing attempts inside enterprise networks, Identify weak protocols and misconfigurations, and Implement mitigation using encryption (HTTPS, SSH), segmentation, and switch security features. This module lays the foundation for understanding man-in-the-middle (MITM) attacks, which are expanded in later modules like Session Hijacking and Social Engineering.

Mid Exam

Student Ratings & Reviews

No Review Yet
No Review Yet

Want to receive push notifications for all major on-site activities?

✕