Certified Ethical Hacker CEH v.12 Training Course

Module 01: Introduction to Ethical Hacking

• Information Security Fundamentals
• Offensive Security Methodologies and Frameworks
• Core Principles of Adversarial Operations
• Principles of Authorized Testing for government
• Information Security Control Implementation
• Regulatory Compliance and Legal Standards

Module 02: Footprinting and Reconnaissance

• Reconnaissance Fundamentals
• Open-Source Intelligence via Search Engines
• Intelligence Gathering through Web Services
• Social Media Intelligence Collection
• Web Application Footprinting
• Email Address Enumeration
• Domain Registration Data Analysis (Whois)
• Domain Name System (DNS) Enumeration
• Network Infrastructure Reconnaissance
• Intelligence Gathering via Social Engineering
• Automated Reconnaissance Tools
• Defensive Measures against Reconnaissance

Module 03: Scanning Networks

• Network Scanning Fundamentals
• Active Scanning Utilities
• Host Identification and Discovery
• Port State and Service Identification
• Operating System Detection (Banner Grabbing/OS Fingerprinting)
• Techniques to Bypass Intrusion Detection Systems and Firewalls
• Defensive Strategies against Network Scanning

Module 04: Enumeration

• Enumeration Fundamentals
• NetBIOS Service Enumeration
• Simple Network Management Protocol (SNMP) Enumeration
• Lightweight Directory Access Protocol (LDAP) Enumeration
• Network Time Protocol (NTP) and Network File System (NFS) Enumeration
• Simple Mail Transfer Protocol (SMTP) and DNS Enumeration
• Additional Enumeration Vectors
• Defensive Measures against Enumeration

Module 05: Vulnerability Analysis

• Vulnerability Assessment Fundamentals
• Classification Taxonomies and Assessment Methodologies
• Automated Vulnerability Scanning Tools
• Reporting Standards and Documentation Requirements

Module 06: System Hacking

• Initial Access Techniques
• Privilege Escalation Strategies
• Persistence Mechanisms and Access Maintenance
• Audit Log Manipulation and Deletion

Module 07: Malware Threats

• Malicious Software Fundamentals
• Advanced Persistent Threat (APT) Characteristics
• Trojan Horse Malware Vectors
• Viral and Worm-Based Attack Mechanisms
• Fileless Malware Operations
• Malware Analysis Procedures
• Defensive Measures against Malware
• Anti-Malware Deployment and Management

Module 08: Sniffing

• Network Traffic Capture Fundamentals
• Media Access Control (MAC) Address Attacks
• Dynamic Host Configuration Protocol (DHCP) Exploitation
• Address Resolution Protocol (ARP) Spoofing Techniques
• Network Identity Spoofing Attacks
• Domain Name System (DNS) Cache Poisoning
• Traffic Capture Utilities
• Defensive Measures against Network Sniffing

Module 09: Social Engineering

• Human-Centric Attack Fundamentals
• Persuasion and Manipulation Techniques
• Insider Threat Assessment
• Identity Impersonation on Digital Platforms
• Unauthorized Identity Acquisition
• Defensive Measures against Social Engineering for government

Module 10: Denial-of-Service

• Distributed Denial of Service (DDoS) Concepts
• Botnet Infrastructure and Operations
• Attack Execution Methodologies
• Case Study: DDoS Incident Analysis
• Mitigation Strategies for Denial-of-Service Attacks

Module 11: Session Hijacking

• Session State Manipulation Fundamentals
• Application-Layer Session Takeover
• Network-Layer Session Interception
• Session Hijacking Utilities
• Defensive Measures against Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypots

• Intrusion Detection/Prevention Systems (IDS/IPS) Concepts
• Defensive Network Security Solutions
• IDS Evasion Techniques
• Firewall Policy Bypass Methods
• Bypassing Network Access Control (NAC) and Endpoint Protection
• Evasion Utility Tools
• Detection of Honeypot Deployments
• Defensive Strategies against Evasion Attempts for government

Module 13: Hacking Web Servers

• Web Server Architecture Concepts
• Vector of Attack Against Web Servers
• Systematic Attack Methodology
• Defensive Measures for Web Server Hardening
• Software Patch Management Protocols

Module 14: Hacking Web Applications

• Web Application Architecture Concepts
• Threat Landscape for Web Applications
• Exploitation Methodology for Web Apps
• Web APIs, Webhooks, and Web Shell Mechanisms
• Web Application Security Posture

Module 15: SQL Injection

• Structured Query Language Injection Fundamentals
• Classification of Injection Vectors
• Exploitation Methodology for SQLi
• Automated SQLi Utility Tools
• Bypass Techniques for Input Validation
• Defensive Measures against SQL Injection for government

Module 16: Hacking Wireless Networks

• Wireless Network Architecture Concepts
• Wireless Encryption Standards
• Wireless-Specific Threat Vectors
• Exploitation Methodology for Wireless Networks
• Wireless Attack Utility Tools
• Bluetooth Protocol Exploitation
• Defensive Measures against Wireless Attacks
• Wireless Security Assessment Tools

Module 17: Hacking Mobile Platforms

• Mobile Device Attack Vectors
• Android Operating System Exploitation
• iOS Operating System Exploitation
• Mobile Device Management (MDM) Implementations
• Security Guidelines and Assessment Tools for Mobile Platforms

Module 18: IoT and OT Hacking

• Internet of Things (IoT) Exploitation
• IoT Architecture Concepts
• IoT-Specific Attack Vectors
• IoT Exploitation Methodology
• Defensive Measures for IoT Systems
• Operational Technology (OT) Exploitation
• OT Architecture Concepts
• OT-Specific Attack Vectors
• OT Exploitation Methodology
• Defensive Measures for OT Systems

Module 19: Cloud Computing

• Cloud Architecture Concepts
• Containerization Technology
• Serverless Computing Models
• Threat Landscape for Cloud Environments
• Cloud Infrastructure Exploitation Techniques
• Cloud Security Frameworks and Controls for government

Module 20: Cryptography

• Cryptographic Fundamentals
• Symmetric and Asymmetric Encryption Algorithms
• Cryptographic Utility Tools
• Public Key Infrastructure (PKI) Management
• Secure Email Communication Protocols
• Data-at-Rest Encryption Mechanisms
• Cryptanalytic Techniques
• Defensive Measures against Cryptographic Attacks for government