Certified Ethical Hacker (C|EH v12) Training & Certification

Curriculum’s second chapter is focussed on reconnaissance and foot printing. 30 real-life procedures will enable you to perform them on:

• Search engines, social media
• Emails, DNS, target network

This section will make you practice about Information Security controls through 10 exercises on:

• Port services, operating systems on host networks
• Target network apart from IDS & firewall

Enumeration is defined as the process of extracting usernames, machine names, network resources, shares and services from a system. C|EH’s 4th module with 20 practical tasks talks about:

• Border Gateway Protocol [BGP]
• Network File Sharing [NFS]
• Doing NetBIOS, FTP Enumeration

Steganography, Steganalysis attacks, covering tracks, with 25 practical exercises are the focus of this module. Other topics and procedures:

• Buffer overflow attacks
• Privilege escalation [Linux]
• Online active attack

Learners are familiarized with Trojans, viruses, and worms. This chapter’s 20 practicals also go into:

• Controlling a victim machine
• Parts of malware
• Virus detection mechanisms

Process of monitoring and capturing all data packets passing through given network is called sniffing. This chapter apart from measures to counter it also discusses:

• DHCP starvation attack
• Promiscuous detection tools
• DNS poisoning

The 9th module talks about auditing human level vulnerabilities, social engineering countermeasures, and identifying theft attempts. Its 4 practicals talk about:

• Identity theft
• Phishing attack audit
• Types of social engineering

Halfway through the certification, this domain imparts knowledge about different DoS, DDoS techniques, countermeasures, protections. Coming with 5 practical exercises, its other topics are:

• Botnets
• DoS DDoS detection tools

Session Hijacking is a technique used to network-level session management, authentication, authorization, and cryptographic weaknesses. This chapter’s other topics with 4 exercises include:

• Session Fixation attack
• Spoofing
• TCP/IP hijacking

Firewall, intrusion detection system, honeypot evasion techniques are this chapter’s focus. Apart from countermeasures and 7 practicals it covers: bypassing antiviruses and firewalls.

A wide attack methodology, audits of web server faults, along with 8 practicals are covered when three-fourths of the curriculum has been completed. Other topics include:

• Patch management tools
• DNS server hijacking
• Website defacement

Applications are a major source of revenue for any company. This includes desktop applications. 15 practical exercises, apart from solutions to attacks on them and the following topics are covered:

• API hacking method
• Application security risks
• Cross-request forgery attack

Also known as SQLi, this is a weakness where queries made by an app to the database can face disruptions from an attacker. Injection detection tools, techniques are this module’s focus. 4 practicals cover topics like:

• Blind SQL injection
• Signature evasion techniques
• SQL injection attack against MSSQL

This chapter is dedicated to Wi-Fi networks, and solutions to keep them safe. 3 practical exercises inform more about:

• Bluetooth hacking
• Wireless traffic analysis
• Wi-Fi Encryption cracking

Since smartphones are more used than desktops these days, they are easy prey for data stealers. This chapter, while talking about both Android & iOS comes with 5 practical exercises and:

• Android and iOS security tools
• Mobile platform attack vectors
• Mobile device management

Operational Technology [OT] and Internet of Things [IoT], packet-sniffing techniques, solutions against sniffing attacks are this chapter’s focus with 2 practicals. Other topics are:

• Information gathering using online foot-printing tools
• IoT devices’ traffic analysis
• OT and IoT hacking techniques

The penultimate module talks about server rooms, container technologies server less computing. 5 practical exercises also delve into:

• S3 bucket enumeration & their tools
• Fog & Edge computing
• Docker, Kubernetes & their vulnerabilities

Cryptocurrency, blockchain are emerging as global digital currencies. Their security infrastructure is weak. The concluding module of this certification talks about ciphers, public-key infrastructure, cryptography tools, and attacks. Its 10 exercises are also about:

• Encryption attacks
• MD5, MD6 hash calculators
• Disk & email encryption