Certified Ethical Hacker: Course Outline

Module 1 : Introduction to Ethical Hacking

Internet is Integral Part of Business and Personal Life - What Happens Online in 60 Seconds

• Information Security Overview
• Information Security Threats and Attack Vectors
• Hacking Concepts, Types, and Phases
• Ethical Hacking Concepts and Scope
• Information Security Controls
• Physical Security
• Incident Management
• What is Vulnerability Assessment?
• Penetration Testing
• Information Security Laws and Standards

Module 2: Footprinting and Reconnaissance

• Footprinting Concepts
• Footprinting Methodology
• Footprinting Tools
• Footprinting Countermeasures
• Footprinting Penetration Testing

Module 3 : Scanning Networks

• Overview of Network Scanning
• CEH Scanning Methodology

Module 4: Enumeration

• Enumeration Concepts
• NetBIOS Enumeration
• SNMP Enumeration
• SNMP Enumeration Tools
• LDAP Enumeration
• NTP Enumeration
• SMTP Enumeration
• Enumeration Countermeasures
• SMB Enumeration Countermeasures
• Enumeration Pen Testing

Module 5: System Hacking

• Information at Hand Before System Hacking Stage
• System Hacking: Goals
• CEH Hacking Methodology (CHM)
• CEH System Hacking Steps
• Hiding Files
• Covering Tracks
• Penetration Testing

Module 6: Malware Threats

• Introduction to Malware
• Trojan Concepts
• Types of Trojans
• Virus and Worms Concepts
• Malware Reverse Engineering
• Countermeasures
• Anti-Malware Software
• Penetration Testing

Module 7: Sniffing

• Sniffing Concepts
• MAC Attacks
• DHCP Attacks
• ARPPoisoning
• Spoofing Attack
• DNS Poisoning
• Sniffing Tools
• Sniffing Tool: Wireshark
• Follow TCP Stream in Wireshark
• Display Filters in Wireshark
• Additional Wireshark Filters
• Packet Sniffing Tool: Capsa Network Analyzer
• Network Packet Analyzer
• Counter measures
• Sniffing Detection
• Sniffing Pen Testing

Module 8: Social Engineering

• Social Engineering Concepts
• Social Engineering Techniques
• Impersonation on Social Networking Sites
• Identity Theft
• Social Engineering Countermeasures
• Penetration Testing

Module 9: Denial-of-Service

• DoS/DDoS Concepts
• DoS/DDoS Attack Techniques
• Botnets
• DDoS Case Study
• DoS/DDoS Attack Tools
• Counter-measures
• DoS/DDoS Protection Tools
• DoS/DDoS Attack Penetration Testing

Module 10: Session Hijacking

• Session Hijacking Concepts
• Application Level Session Hijacking
• Network-level Session Hijacking
• Session Hijacking Tools
• Counter-measures
• Session Hijacking Pen Testing

Module 11: Hacking Webservers

• Webserver Concepts
• Webserver Attacks
• Attack Methodology
• Webserver Attack Tools
• Counter-measures
• Patch Management
• Webserver Security Tools
• Webserver Pen Testing

Module 12: Hacking Web Applications

• Web App Concepts
• Web App Threats
• Web App Hacking Methodology
• Web Application Hacking Tools
• Countermeasures
• Security Tools
• Web App Pen Testing
• Web Application Pen Testing Framework

Module 13: SQL Injection

• SQL Injection Concepts
• Types of SQL Injection
• SQL Injection Methodology
• SQL Injection Tools
• Evasion Techniques
• Counter-measures

Module 14: Hacking Wireless Networks

• Wireless Concepts
• Wireless Encryption
• Wireless Threats
• Wireless Hacking Methodology
• Wireless Hacking Tools
• Bluetooth Hacking
• Counter-measures
• Wireless Security Tools
• Wi-Fi Pen Testing

Module 15: Hacking Mobile Platforms

• Mobile Platform Attack Vectors
• Hacking Android OS
• Hacking iOS
• Hacking Windows Phone OS
• Hacking BlackBerry
• Mobile Device Management (MDM)
• Mobile Security Guidelines and Tools
• Mobile Pen Testing

Module 16: Evading IDS, Firewalls, and Honeypots

• IDS, Firewall and Honeypot Concepts
• IDS, Firewall and Honeypot System
• Evading IDS
• Evading Firewalls
• IDS/Firewall Evading Tools
• Detecting Honeypots
• IDS/Firewall Evasion Counter-measures
• Penetration Testing

Module 17: Cloud Computing

• Introduction to Cloud Computing
• Cloud Computing Threats
• Cloud Computing Attacks
• Cloud Security
• Cloud Security Tools
• Cloud Penetration Testing

Module 18: Cryptography

• Market Survey 2014: The Year of Encryption
• Case Study: Heartbleed
• Case Study: Poodlebleed
• Cryptography Concepts
• Encryption Algorithms
• Cryptography Tools
• Public Key Infrastructure(PKI)
• Email Encryption
• Disk Encryption
• Cryptography Attacks
• Cryptanalysis Tools