Certified Ethical Hacker CEH v.12 Training Course

Module 01: Overview of Ethical Hacking Practices

• Information Security Frameworks
• Methodologies and Frameworks for Offensive Security
• Fundamental Concepts in Security Testing
• Principles of Ethical Security Assessment
• Information Security Control Mechanisms
• Regulatory Laws and Security Standards

Module 02: Footprinting and Reconnaissance Operations

• Foundational Principles of Footprinting
• Utilizing Search Engines for Reconnaissance
• Reconnaissance via Web Services
• Intelligence Gathering from Social Platforms
• Web-based Footprinting Techniques
• Email-based Information Discovery
• Whois Record Analysis
• DNS Record Investigation
• Network Topology Mapping
• Social Engineering for Reconnaissance
• Tools for Footprinting Analysis
• Defenses Against Footprinting Activities

Module 03: Network Scanning Protocols

• Principles of Network Scanning
• Instrumentation for Scanning Tasks
• Identification of Active Hosts
• Discovery of Ports and Services
• Operating System Identification and Fingerprinting
• Scanning Past Detection and Prevention Systems
• Countermeasures for Network Scanning

Module 04: System and Service Enumeration

• Enumeration Methodologies
• NetBIOS Enumeration Procedures
• SNMP Enumeration Techniques
• LDAP Directory Enumeration
• NTP and NFS Enumeration
• SMTP and DNS Enumeration
• Additional Enumeration Strategies
• Mitigation of Enumeration Risks

Module 05: Vulnerability Assessment Processes

• Core Concepts in Vulnerability Analysis
• Classification and Assessment Methodologies
• Tools for Vulnerability Scanning
• Reporting and Documentation of Findings

Module 06: System Compromise and Access

• Techniques for Initial Access
• Privilege Escalation Methods
• Persistence Mechanisms
• Log Obfuscation and Clearance

Module 07: Malicious Software Threats

• Fundamentals of Malware
• Advanced Persistent Threat (APT) Overview
• Trojan Horse Mechanisms
• Virus and Worm Characteristics
• Fileless Malware Analysis
• Malware Investigation Procedures
• Defensive Strategies Against Malware
• Anti-Malware Software Solutions

Module 08: Network Traffic Interception

• Principles of Packet Sniffing
• Mac Address Manipulation Attacks
• DHCP-based Interception Techniques
• ARP Poisoning Strategies
• Spoofing-Based Interception
• DNS Poisoning Tactics
• Tools for Traffic Analysis
• Defenses Against Sniffing Activities

Module 09: Social Engineering Tactics

• Social Engineering Theory and Practice
• Manipulation Techniques
• Insider Threat Vectors
• Impersonation on Social Networks
• Identity Theft Mechanisms
• Countermeasures for Social Engineering

Module 10: Denial-of-Service Attacks

• DoS/DDoS Fundamental Concepts
• Botnet Architecture and Functionality
• Attack Vectors for Service Disruption
• DDoS Incident Case Analysis
• Mitigation Strategies for DoS/DDoS

Module 11: Session Interception

• Session Hijacking Principles
• Application-Layer Session Attacks
• Network-Layer Session Attacks
• Tools for Session Manipulation
• Defenses Against Session Hijacking

Module 12: Evasion of Security Controls

• Concepts in IDS, IPS, Firewalls, and Honeypots
• Implementation of Security Solutions
• Bypassing Intrusion Detection Systems
• Firewall Evasion Techniques
• Circumventing NAC and Endpoint Security
• Tools for Control Evasion
• Identification of Honeypots
• Countermeasures for Evasion Tactics

Module 13: Web Server Security Testing

• Web Server Operational Concepts
• Attack Vectors Against Web Servers
• Methodology for Server Assessment
• Defending Against Server Attacks
• Patch Management Protocols

Module 14: Web Application Security Testing

• Web Application Architecture
• Threats to Web Applications
• Assessment Methodologies for Apps
• API, Webhooks, and Web Shell Analysis
• Security Best Practices for Applications

Module 15: SQL Injection Exploitation

• SQL Injection Principles
• Variants of SQL Injection
• Execution Methodology
• Tools for SQL Injection Testing
• Evasion Strategies
• Defensive Measures for SQL Injection

Module 16: Wireless Network Security

• Wireless Technology Fundamentals
• Wireless Encryption Standards
• Threats to Wireless Networks
• Wireless Security Assessment Methods
• Tools for Wireless Testing
• Bluetooth Security Testing
• Countermeasures for Wireless Threats
• Wireless Security Monitoring Tools

Module 17: Mobile Platform Security

• Mobile Attack Vectors
• Android Security Testing
• iOS Security Testing
• Mobile Device Management (MDM)
• Mobile Security Guidelines and Tools

Module 18: IoT and OT Security

• IoT Security Assessment
• IoT Architecture Concepts
• IoT Attack Vectors
• IoT Testing Methodology
• IoT Defense Mechanisms
• OT Security Assessment
• OT System Concepts
• OT Attack Vectors
• OT Testing Methodology
• OT Defense Mechanisms

Module 19: Cloud Security

• Cloud Computing Architecture
• Container Technology Security
• Serverless Computing Security
• Cloud Threat Landscape
• Cloud Environment Testing
• Cloud Security Best Practices

Module 20: Cryptography

• Cryptographic Fundamentals
• Encryption Algorithm Analysis
• Cryptographic Toolsets
• Public Key Infrastructure (PKI)
• Email Encryption Standards
• Disk Encryption Protocols
• Cryptanalysis Techniques
• Cryptographic Defense Measures