ZETLAN TECHNOLOGIES
Course Categories 172+
Cloud & Infrastructure 7
Networking 8
Virtualisation 5
IT Security 10
CyberSecurity & Mgmt 14
Software Development 16
Web Dev & Database 27
Data Science & AI 14
Mobile, Testing & Games 22
Design & Creative 49
Navigation
Home Business About Us Contact Us All Courses FAQ & Help
Contact Us
+91 8680961847 +91 8680961847 (WhatsApp) info@zetlantechnologies.com
Browse by Domain
Cloud & Infrastructure 7
Networking 8
Virtualisation 5
IT Security 10
CyberSecurity & Mgmt 14
Software Development 16
Web Dev & Database 27
Data Science & AI 14
Mobile, Testing & Games 22
Design & Creative 49
2000+ Courses · 15+ Technology Domains
Microsoft Cisco AWS EC-Council View All Courses
C|SA
EC-Council · Exam 312-39

Certified Security

Analyst

Master advanced penetration testing and security analysis — OSINT, social engineering, network pentesting, web app attacks, cloud security assessment, SQL injection, and professional report writing. For security professionals ready to go beyond theory.

Penetration Testing OSINT Social Engineering Network Pentesting Web App Testing SQL Injection Cloud Security Report Writing Vulnerability Assessment Exploit Development
Enroll Now
C|SA Program
Certified Security Analyst · 12 Modules
Penetration Testing Scope and Engagement
Module 01
Open Source Intelligence (OSINT)
Module 02
Social Engineering Penetration Testing
Module 03
Network Penetration Testing — External
Module 04
Network Penetration Testing — Internal
Module 05
Web Application Penetration Testing
Module 06
+ 6 more modules: SQL Injection, Wireless, Cloud, IoT, Binary & Reporting
12
Modules
Full 312-39 syllabus
150
Questions
Multiple choice exam
4 Hours
Duration
Timed exam
24/7
Support
Expert guidance
Why C|SA

Your Pathway to Advanced Penetration Testing

The C|SA certification validates advanced hands-on penetration testing skills — from OSINT and social engineering to cloud and binary exploitation, with professional report writing.

Prerequisites: C|EH Knowledge

Builds directly on ethical hacking fundamentals — ideal for professionals who have C|EH or equivalent practical security knowledge.

Advanced Pentest Coverage

Covers real-world attack and analysis methodology across network, web, cloud, wireless, IoT, and binary exploitation domains.

EC-Council Accredited

C|SA is ANSI-accredited and globally recognised — issued by EC-Council, the world's largest cybersecurity certification body.

Opens Security Analyst Roles

Positions you for Penetration Tester, Red Team Analyst, and VAPT Engineer roles — high-demand offensive security positions worldwide.

Skills You'll Gain

The Complete C|SA Skill Set

From engagement scoping and OSINT to cloud assessment and professional reporting — every skill area from the 312-39 exam syllabus.

Pentest Scoping
Rules of engagement, legal agreements, NDA, pentest types, methodology selection, and engagement planning.
OSINT & Recon
Passive reconnaissance, WHOIS, Shodan, Google dorks, Maltego, Recon-ng, DNS enumeration, email harvesting.
Social Engineering
Phishing campaigns, vishing, smishing, pretexting, USB drops, SET toolkit, GoPhish configuration and execution.
Network Pentesting
External/internal reconnaissance, Nmap scanning, service enumeration, vulnerability assessment, exploit frameworks.
Active Directory Attacks
AD enumeration, Kerberoasting, Pass-the-Hash, BloodHound, Mimikatz, privilege escalation techniques.
Web App Pentesting
OWASP Top 10 exploitation, Burp Suite Pro, authentication bypass, session management flaws, automated scanning.
SQL Injection
In-band, blind, time-based SQLi, sqlmap, manual exploitation, error-based extraction, database enumeration.
Wireless Pentesting
WPA2/WPA3 cracking, rogue AP, evil twin attacks, Aircrack-ng, WPS attacks, Bluetooth security testing.
Cloud Security Assessment
AWS/Azure/GCP assessment, IAM misconfiguration, S3 exposure, metadata service attacks, serverless security.
IoT & OT Pentesting
IoT device assessment, firmware extraction, industrial protocol analysis, SCADA/ICS security, Modbus/DNP3.
Binary Exploitation
Buffer overflow, shellcode writing, GDB, pwndbg, ROPgadget, format string vulnerabilities, heap exploitation.
Report Writing
Executive summary, CVSS scoring, risk ratings, remediation recommendations, professional debrief delivery.
Who Should Enroll

C|SA Is for Advanced Security Professionals

Whether you are formalising your penetration testing skills or transitioning from defensive to offensive security, C|SA provides the advanced methodology and hands-on skills every red team demands.

🎯
Penetration Testers
Security professionals who want to formalise and advance their pen testing skills with a globally recognised credential.
🛡️
Security Analysts
SOC and security team members moving into offensive security and hands-on penetration testing roles.
🔴
Red Team Aspirants
Professionals building red team skills for enterprise environments and advanced adversary simulation engagements.
💼
Security Consultants
IT consultants expanding into cybersecurity assessment services and client-facing VAPT delivery.
Your EC-Council Certification Roadmap
C|SA Certified Security Analyst Start Here
Start here — Exam 312-39
C|EH Certified Ethical Hacker
World's #1 ethical hacking cert — Exam 312-50
C|PENT Certified Penetration Testing Professional
Advanced pentest certification — Exam 312-64
C|EH Master CEH Master
6-hour practical exam — the elite credential
Tools & Technologies
Metasploit
Nmap
Burp Suite Pro
Sqlmap
Wireshark
Aircrack-ng
BloodHound
Mimikatz
Maltego
Shodan
GoPhish
SET
Recon-ng
Cobalt Strike
Kali Linux
PowerShell Empire
Metasploit
Nmap
Burp Suite Pro
Sqlmap
Wireshark
Aircrack-ng
BloodHound
Mimikatz
Maltego
Shodan
GoPhish
SET
Recon-ng
Cobalt Strike
Kali Linux
PowerShell Empire
Curriculum

C|SA — 12 Course Modules

Every 312-39 exam objective covered — from engagement scoping and OSINT to binary exploitation and professional report writing.

  • Rules of Engagement and Pentest Methodology
  • Scoping a Penetration Testing Engagement
  • Legal Agreements, Contracts, and NDA Requirements
  • Types of Penetration Testing: Black, White, and Grey Box
  • Methodology Selection and Framework Overview
  • Engagement Planning and Documentation
  • Pre-Engagement Communication and Kickoff
  • Passive Reconnaissance Techniques and Concepts
  • WHOIS Lookups and Domain Intelligence
  • Shodan — Search Engine for Exposed Devices
  • Google Dorks and Advanced Search Operators
  • Maltego for Link Analysis and OSINT Mapping
  • Recon-ng Automated Reconnaissance Framework
  • Social Media Intelligence (SOCMINT) Techniques
  • DNS Enumeration and Zone Transfer Attacks
  • Email Harvesting and Credential Exposure Discovery
  • Phishing Campaign Design and Execution
  • Vishing (Voice Phishing) Attack Techniques
  • Smishing (SMS Phishing) Attack Vectors
  • Pretexting Scenarios and Identity Construction
  • USB Drop Attacks and Physical Delivery Tactics
  • Physical Access Attempts and Tailgating
  • Social Engineering Toolkit (SET) Walkthrough
  • GoPhish — Phishing Simulation Platform
  • Reporting and Metrics for Social Engineering Engagements
  • External Reconnaissance and Target Profiling
  • Port Scanning and Service Discovery with Nmap
  • Service Enumeration and Banner Grabbing
  • Vulnerability Assessment with Nessus and OpenVAS
  • Exploit Frameworks: Metasploit and Manual Exploitation
  • Lateral Movement from External Footholds
  • Firewall and IDS/IPS Evasion Techniques
  • Post-Exploitation and Evidence Collection
  • Internal Network Scanning and Host Discovery
  • Active Directory Enumeration and Attack Surface Mapping
  • Kerberoasting and AS-REP Roasting Attacks
  • Pass-the-Hash and Pass-the-Ticket Techniques
  • BloodHound for AD Attack Path Analysis
  • Mimikatz Credential Dumping and Golden Ticket Attacks
  • Privilege Escalation on Windows and Linux
  • Lateral Movement and Persistence Mechanisms
  • OWASP Top 10 — Exploitation Techniques
  • Burp Suite Pro — Intercepting and Modifying Requests
  • Manual Testing Methodology for Web Applications
  • Automated Scanning with OWASP ZAP and Nikto
  • Authentication Bypass and Broken Access Control
  • Session Management Flaws and Cookie Manipulation
  • Cross-Site Scripting (XSS) and CSRF Attacks
  • Server-Side Request Forgery (SSRF) and XXE Injection
  • In-Band SQL Injection: Union-Based and Error-Based
  • Blind SQL Injection: Boolean-Based Techniques
  • Time-Based Blind SQL Injection
  • Automated SQL Injection with Sqlmap
  • Manual Exploitation of SQL Injection Flaws
  • Attacking Stored Procedures and Database Functions
  • Error-Based Data Extraction Techniques
  • Database Enumeration and Schema Discovery
  • Bypassing WAF for SQL Injection Attacks
  • WPA2 and WPA3 Handshake Capture and Cracking
  • Rogue Access Point Setup and Deployment
  • Evil Twin Attack Configuration and Execution
  • Wireless Cracking with Aircrack-ng Suite
  • WPS Attack Vulnerabilities and Exploitation
  • Bluetooth Security Assessment Techniques
  • Wireless Client Deauthentication Attacks
  • PMKID Attack — Clientless WPA2 Cracking
  • AWS Security Assessment — IAM, EC2, S3 Buckets
  • Azure Security Assessment — Azure AD, Storage, VMs
  • GCP Security Assessment — IAM, GCS, Compute
  • IAM Misconfiguration Identification and Exploitation
  • S3 Bucket Exposure and Data Exfiltration
  • Instance Metadata Service (IMDS) Attack Techniques
  • Serverless Security Testing — Lambda and Functions
  • Container Security Assessment — Docker and Kubernetes
  • IoT Device Attack Surface Assessment
  • Firmware Extraction and Analysis Techniques
  • Industrial Protocol Analysis: Modbus and DNP3
  • SCADA and ICS Security Testing Methodology
  • Shodan for IoT Device Discovery
  • Hardware Hacking Fundamentals
  • OT Network Segmentation and Bypass Techniques
  • CVE Analysis for IoT and Embedded Systems
  • Buffer Overflow Fundamentals and Stack Mechanics
  • Shellcode Writing and Payload Development
  • GDB Debugging and Binary Analysis
  • Pwndbg Enhanced GDB Plugin Usage
  • ROPgadget — Return-Oriented Programming Chains
  • Format String Vulnerabilities and Exploitation
  • Heap Exploitation Techniques
  • ASLR, DEP, and NX Bypass Strategies
  • Executive Summary — Audience and Structure
  • Technical Findings Documentation Standards
  • CVSS Scoring and Severity Classification
  • Risk Ratings and Business Impact Assessment
  • Remediation Recommendations and Prioritisation
  • Professional Penetration Test Report Structure
  • Evidence Organisation and Screenshot Standards
  • Client Debrief Delivery and Presentation Skills
Have Questions?

Chat with our EC-Council certified trainers instantly.

WhatsApp Us Call Us
Exam Details

312-39 Exam Information

Everything you need to know about the C|SA exam — format, duration, and passing criteria.

312-39
Exam Code
Official EC-Council code
150
Questions
Multiple choice questions
4 Hours
Duration
Time allowed for exam
MCQ
Format
Multiple choice questions
New Batch Starting Soon — Limited Seats

Advance Your Security Career with C|SA

Join security professionals who elevated their careers with EC-Council C|SA. Expert-led advanced penetration testing training with real-world labs and full exam support at Zetlan Technologies.

Enroll Now Call Us WhatsApp
Zetlan Technologies
Online — Replies in minutes
👋 Hi! Welcome to Zetlan Technologies.

Interested in EC-Council C|SA (312-39)? Ask us anything!
Just now
Course Details Batch Schedule Free Demo Brochure
Open WhatsApp Chat
Your info is safe with us
💬 Chat with us!