Certified Ethical Hacker (CEH) Certification Course in Columbia

Certified Ethical Hacker Course Outline

Module 1: Introduction to Ethical Hacking

• Elements of Information Security
• Classification of Attacks
• Hacker Classes
• Ethical Hacking
• AI-Driven Ethical Hacking
• ChatGPT-Powered AI Tools for Ethical Hackers
• CEH Ethical Hacking Framework
• Cyber Kill Chain Methodology
• MITRE ATT&CK Framework
• Information Assurance (IA)
• Risk Management
• Threat Intelligence Lifecycle
• Incident Management
• PCI DSS
• HIPPA
• SOX
• GDPR
• DPA

Module 2: Foot Printing and Reconnaissance

• Reconnaissance
• Footprinting Using Advanced Google Hacking Techniques
• Footprinting through People Search Services
• Dark Web Footprinting
• Competitive Intelligence Gathering
• Footprinting through Social Networking Sites
• Whois Lookup
• DNS Footprinting
• Traceroute Analysis
• Email Footprinting
• Footprinting through Social Engineering
• AI-Powered OSINT Tools

Hands-on Labs:

• Perform footprinting on the target network using search engines, internet research services, and social networking sites
• Perform whois, DNS, network, and email footprinting on the target network
• Perform Footprinting using AI

Module 3: Scanning Networks

• Network Scanning
• Scanning Tools
• Host Discovery Techniques
• Port Scanning Techniques
• Host Discovery and Port Scanning with AI
• Service Version Discovery
• OS Discovery/Banner Grabbing
• Scanning Beyond IDS and Firewall
• Scanning Detection and Prevention

Hands-on Labs:

• Perform host, port, service, and OS discovery on the target network
• Perform scanning on the target network beyond IDS and Firewall
• Perform scanning using AI

Module 4: Enumeration

• Enumeration, NetBIOS Enumeration
• SNMP Enumeration
• LDAP Enumeration
• NTP Enumeration
• NFS Enumeration
• SMTP Enumeration
• DNS Cache Snooping
• DNSSEC Zone Walking
• IPsec Enumeration
• VoIP Enumeration
• RPC Enumeration
• Unix/Linux User Enumeration
• SMB Enumeration
• Enumeration using AI
• Enumeration Countermeasures

Hands-on Labs:

• Perform NetBIOS, SNMP, LDAP, NFS, DNS, SMTP, RPC, SMB, and FTP Enumeration
• Perform Enumeration using AI

Module 5: Vulnerability Analysis

• Vulnerability Classification
• Vulnerability Scoring Systems and Databases
• Vulnerability-Management Life Cycle
• Vulnerability Research
• Vulnerability Scanning and Analysis 
• Vulnerability Assessment Tools
• Vulnerability Assessment Reports
• AI-Powered Vulnerability Assessment Tools

Module 6: System Hacking

• Password Cracking
• Password Attacks
• Password-Cracking Tools
• Vulnerability Exploitation
• Metasploit Framework
• AI-Powered Vulnerability Exploitation Tools
• Buffer Overflow
• Buffer Overflow Detection Tools
• Active Directory (AD) Enumeration
• Privilege Escalation
• Privilege Escalation Tools
• Executing Applications
• Keylogger
• Spyware
• Rootkits
• Steganography
• Steganalysis
• Steganography Detection Tools
• Maintaining Persistence
• Linux and Windows Post Exploitation
• Covering Tracks
• Clearing Logs
• Track-Covering Tools

Hands-on Labs:

• Perform an Active Online Attack to Crack the System’s Password
• Perform Buffer Overflow Attack to Gain Access to a Remote System
• Escalate Privileges using Privilege Escalation Tools
• Escalate Privileges in Linux Machine
• Hide Data using Steganography
• Clear Windows and Linux Machine Logs using Various Utilities
• Hiding Artifacts in Windows and Linux Machines
• Perform System Hacking using AI

Module 7: Malware Threats

• Malware
• Advanced Persistent Threat Lifecycle
• Trojan
• Virus
• Ransomware
• Computer Worms
• Fileless Malware
• AI-based Malware
• Malware Analysis
• Static Malware Analysis
• Dynamic Malware Analysis
• Virus Detection Methods
• Malware Countermeasures
• Anti-Trojan Software
• AI-Powered Malware Detection and Analysis Tools

Hands-on Labs:

• Gain Control over a Victim Machine using Trojan
• Infect the Target System using a Virus
• Perform Static and Dynamic Malware Analysis

Module 8: Sniffing

• Network Sniffing
• MAC Flooding
• DHCP Starvation Attack
• ARP Spoofing
• ARP Spoofing/Poisoning Tools
• MAC Spoofing
• VLAN Hopping
• STP Attack
• DNS Poisoning Techniques
• DNS Poisoning Tools
• Sniffing Tools, Sniffer Detection Techniques
• Promiscuous Detection Tools

Hands-on Labs:

• Perform MAC Flooding, ARP Poisoning, MITM and DHCP Starvation Attack
• Spoof a MAC Address of a Linux Machine
• Perform Network Sniffing using Various Sniffing Tools
• Detect ARP Poisoning in a Switch-Based Network

Module 9: Social Engineering

• Social Engineering
• Types of Social Engineering
• Human-based Social Engineering Techniques
• Impersonation
• Computer-based Social Engineering Techniques
• Phishing
• Phishing Tools
• Perform Impersonation using AI
• Identity Theft
• Mobile-based Social Engineering Techniques
• Social Engineering Countermeasures
• Anti-Phishing Toolbar

Hands-on Labs:

• Perform Social Engineering using Various Techniques
• Detect a Phishing Attack
• Social Engineering using AI

Module 10: Denial-of-Service

• DoS Attack
• DDoS Attack
• Botnets
• DoS/DDoS Attack Techniques
• DoS/DDoS Attack Toolkits
• DoS/DDoS Attack Detection Techniques
• DoS/DDoS Protection Tools
• DoS/DDoS Protection Services

Hands-on Labs:

• Perform a DoS and DDoS attack on a Target Host
• Detect and Protect Against DoS and DDoS Attacks

Module 11: Session High jacking

• Session Hijacking
• Application-Level Session Hijacking
• Compromising Session IDs
• Session Hijacking
• Network-Level Session Hijacking
• TCP/IP Hijacking
• RST Hijacking
• Blind Hijacking
• Session Hijacking Tools
• Session Hijacking Detection Methods
• Session Hijacking Detection Tools
• Approaches to Prevent Session Hijacking

Hands-on Labs:

• Perform Session Hijacking using various Tools
• Detect Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypots

• Intrusion Detection System (IDS)
• Intrusion Prevention System (IPS)
• Firewall
• Types of Firewalls
• Intrusion Detection Tools
• Intrusion Prevention Tools
• IDS/Firewall Evasion Techniques
• NAC and Endpoint Security Evasion Techniques
• IDS/Firewall Evading Tools
• Honeypot
• Types of Honeypots
• Honeypot Tools
• IDS/Firewall Evasion Countermeasures

Hands-on Labs:

• Perform Intrusion Detection using Various Tools
• Deploy Honeypot to Detect Malicious Network Traffic
• Bypass Firewall Rules using Tunneling
• Bypass Antivirus

Module 13: Hacking Web Servers

• Web Server Architecture
• Web Server Vulnerabilities
• Web Server Attacks
• DNS Server Hijacking
• Web Cache Poisoning Attack
• Web Server Footprinting/Banner Grabbing
• Directory Brute Forcing
• Vulnerability Scanning
• Web Server Password Hacking
• Web Server Attack Tools
• Web Server Attack Countermeasures
• Detecting Web Server Hacking Attempts
• Web Server Security Tools

Hands-on Labs:

• Perform Web Server Reconnaissance using Various Tools
• Enumerate Web Server Information
• Perform a Web Server Attack
• Perform a Web Server Hacking using AI

Module 14: Hacking Web Applications

• Web Application
• OWASP Top 10 Application Security Risks – 2021
• Web Application Attacks
• Footprint Web Infrastructure
• Analyze Web Applications
• Bypass Client-side Controls
• Attack Access Controls
• Attack Web Services
• Web API
• Webhooks
• Web API Hacking Methodology
• API Security Risks and Solutions
• Web Application Security Testing
• Web Application Fuzz Testing
• Encoding Schemes
• Web Application Attack Countermeasures
• Web Application Security Testing Tools

Hands-on Labs:

• Perform Web Application Reconnaissance using Various Tools
• Perform Web Spidering
• Perform Web Application Vulnerability Scanning
• Perform Web Application Attacks
• Detect Web Application Vulnerabilities using Various Web Application Security Tools
• Perform Web Application Hacking using AI

Module 15: SQL Injection

• SQL Injection
• Types of SQL Injection
• Error Based SQL Injection
• Union SQL Injection
• Blind/Inferential SQL Injection
• SQL Injection Methodology
• Information Gathering and SQL Injection Vulnerability Detection
• Launch SQL Injection Attacks
• Advanced SQL Injection
• SQL Injection Tools
• SQL Injection with AI
• Evasion Techniques
• SQL Injection Countermeasures
• SQL Injection Detection Tools

Hands-on Labs:

• Perform an SQL Injection Attack Against MSSQL to Extract Databases
• Detect SQL Injection Vulnerabilities using Various SQL Injection Detection Tools
• Perform SQL Injection using AI

Module 16: Hacking Wireless Networks

• Wireless Networks
• Wireless Standards
• Wireless Encryption
• Wireless Threats
• Wireless Hacking Methodology
• Wi-Fi Discovery
• Wireless Traffic Analysis
• Launch of Wireless Attacks
• Wi-Fi Encryption Cracking
• Wireless Attack Countermeasures
• Wi-Fi Security Auditing Tools

Hands-on Labs:

• Footprint a Wireless Network
• Perform Wireless Traffic Analysis
• Crack a WPA2 Network
• Create a Rogue Access Point

Module 17: Hacking Mobile Platforms

• OWASP Top 10 Mobile Risks – 2024
• Anatomy of a Mobile Attack
• App Sandboxing Issues
• SMS Phishing Attack (SMiShing)
• Call Spoofing
• OTP Hijacking/Two-Factor Authentication Hijacking
• Camera/Microphone Capture Attacks
• Android Rooting
• Hacking Android Devices
• Android Hacking Tools
• Android Security Tools
• Jailbreaking iOS
• Hacking iOS Devices
• iOS Device Security Tools
• Mobile Device Management (MDM)
• OWASP Top 10 Mobile Risks and Solutions
• Mobile Security Guidelines
• Mobile Security Tools

Hands-on Labs:

• Hack an Android Device by Creating Binary Payloads
• Exploit the Android Platform through ADB
• Hack an Android Device by Creating APK File
• Secure Android Devices using Various Android Security Tools

Module 18: IoT and OT Hacking

• IoT Architecture
• IoT Technologies and Protocols
• OWASP Top 10 IoT Threats
• IoT Vulnerabilities
• IoT Threats
• IoT Attacks
• IoT Hacking Methodology
• IoT Hacking Tools
• IoT Security Tools
• IT/OT Convergence (IIOT)
• OT Technologies and Protocols
• OT Vulnerabilities
• OT Threats
• OT Attacks
• OT Hacking Methodology
• OT Hacking Tools
• OT Security Tools

Hands-on Labs:

• Gather Information using Online Footprinting Tools
• Capture and Analyse IoT Device Traffic
• Perform IoT Attacks

Module 19: Cloud Computing

• Cloud Computing
• Fog Computing
• Edge Computing
• Container
• Docker
• Kubernetes
• Serverless Computing
• OWASP Top 10 Cloud Security Risks
• Cloud Computing Threats
• Container Vulnerabilities
• Kubernetes Vulnerabilities
• Cloud Attacks
• Cloud Hacking Methodology
• AWS Hacking
• Microsoft Azure Hacking
• Google Cloud Hacking
• Container Hacking
• Cloud Network Security
• Cloud Security Controls
• Cloud Security Tools

Hands-on Labs:

• Perform S3 Bucket Enumeration using Various S3 Bucket Enumeration Tools
• Exploit Open S3 Buckets
• Escalate IAM User Privileges by Exploiting Misconfigured User Policy
• Perform Vulnerability Assessment on Docker Images

Module 20: Cryptography

• Cryptography, Ciphers
• Symmetric Encryption Algorithms
• Asymmetric Encryption Algorithms
• Message Digest Functions
• Quantum Cryptography
• Cryptography Tools
• Public Key Infrastructure (PKI)
• Signed Certificate
• Digital Signature
• Email Encryption
• Disk Encryption
• Blockchain
• Cryptanalysis Methods
• Cryptography Attacks
• Attacks on Blockchain
• Quantum Computing Attacks
• Cryptanalysis Tools

Hands-on Labs:

• Encrypt the Information using Various Cryptography Tools
• Create and Use Self-signed Certificates
• Perform Email and Disk Encryption
• Perform Cryptanalysis using Various Cryptanalysis Tools
• Perform Cryptography using AI

Who should attend this CEH Certified Ethical Hacker Course?

This CEH Course is ideal for individuals aiming to deepen their understanding and practical skills in the art of ethical hacking. It is particularly beneficial for the following professionals:

• Cyber Red Team Operator
• System Administrators
• Cybersecurity Analysts
• IT Managers and Directors
• Information Security Engineer
• Network Architects
• CND Cyber Analyst

Prerequisites for the CEH Certified Ethical Hacker Course

There are no formal prerequisites to attend this EC-Council Certification.

CEH Certified Ethical Hacker Course Overview

The CEH Certified Ethical Hacker Course introduces learners to Ethical Hacking, exploring hacker approaches, vulnerabilities, penetration testing, and defence strategies essential for protecting modern systems. 

Formal CEH training provides practical skills, recognised certification, and credibility, helping learners master tools, techniques, and methodologies while boosting employability in cyber security roles.

The Knowledge Academy 5-Day CEH Training ensures a globally recognised, professional learning experience backed by EC-Council standards.

CEH Certified Ethical Hacker Course Objectives

• To learn the tools, techniques and approaches cybercriminals use
• To conduct comprehensive network scanning and enumeration
• To analyse vulnerabilities and perform effective Ethical Hacking
• To identify and mitigate malware and other malicious software
• To understand and apply Ethical Hacking to mobile and IoT devices
• To develop skills in evading IDS, firewalls, and honeypots

After attending this EC-Council Certification, delegates will be equipped with the knowledge to identify vulnerabilities across a variety of operating systems and effectively exploit these vulnerabilities to test system defences.

What’s included in this CEH Certified Ethical Hacker Course?

• Certified Ethical Hacker Certification Examination [312-50 (ECC EXAM), 312-50 (VUE)]
• 1-year lab access and access to eBooks as part of the course package
• World-Class Training Sessions from Experienced Instructors
• Certified Ethical Hacker Certificate
• Digital Delegate Pack

Certified Ethical Hacker Certification Exam Information

The Certified Ethical Hacker (C|EH) exam evaluates a candidate proficiency in Ethical Hacking techniques and cybersecurity principles. The exam format is as follows:

• Type of Questions: Multiple Choice
• Total Questions: 125
• Duration: 4 Hours