C|EH — Certified Ethical Hacker (312-50)

Hacker

The world's #1 ethical hacking certification — master 20 domains covering footprinting, scanning, enumeration, system hacking, malware, social engineering, web hacking, wireless attacks, cloud security, and cryptography. Used by 350,000+ professionals globally.

Ethical Hacking Footprinting Scanning Enumeration System Hacking Malware Analysis SQL Injection Wireless Hacking Cloud Security Social Engineering Web Hacking Cryptography

Skills You'll Gain

The Complete C|EH Skill Set

From ethical hacking fundamentals to advanced exploitation and cloud security — every skill area from the 312-50 exam syllabus.

Footprinting & Recon

Passive/active reconnaissance, OSINT, Google dorks, Shodan, Maltego, DNS enumeration, and theHarvester.

Network Scanning

TCP/IP analysis, Nmap port scanning, OS fingerprinting, Nessus vulnerability scanning, and network mapping.

Enumeration

NetBIOS, SNMP, LDAP, NTP, SMB, DNS, RPC enumeration with Metasploit auxiliary modules.

System Hacking

Password cracking, privilege escalation, keyloggers, covering tracks, log manipulation, and Metasploit framework.

Malware Analysis

Static/dynamic malware analysis, reverse engineering basics, APT malware, IOCs, and sandbox analysis.

Sniffing

Wireshark capture, ARP poisoning, MAC flooding, MITM attacks, DNS poisoning, and SSL stripping.

Social Engineering

Phishing, spear phishing, vishing, smishing, impersonation, insider threats, and SET toolkit.

Web App Hacking

OWASP Top 10, XSS, CSRF, IDOR, broken authentication, and Burp Suite workflow.

SQL Injection

In-band, blind, and time-based SQLi; sqlmap automation, NoSQL injection, and WAF bypass.

Wireless Hacking

WEP/WPA/WPA2/WPA3 cracking, evil twin, PMKID attack, Aircrack-ng suite, and BLE attacks.

Cloud Security

AWS/Azure/GCP exploitation, S3 misconfiguration, IAM escalation, container and serverless security.

Cryptography

AES, RSA, ECC, PKI, digital signatures, SSL/TLS, steganography, and disk encryption tools.

C|EH Is for Offensive Security Professionals

Whether you are transitioning into ethical hacking or advancing your offensive security skills, C|EH equips you with the hacker mindset and technical toolkit every organisation demands.

🎯

Security Professionals

IT and network professionals ready to transition into ethical hacking and offensive security.

🔴

Aspiring Penetration Testers

Professionals who want to build a career in penetration testing and red teaming.

🛡️

SOC Analysts

Analysts who want to understand attacker techniques to improve defensive capabilities.

💼

Security Managers

Managers and CISOs needing hands-on understanding of attack methodologies.

Curriculum

C|EH — 20 Course Modules

Every 312-50 exam objective covered — from ethical hacking fundamentals to IoT, OT, cloud, and cryptography.

Cybersecurity Fundamentals and Ethical Hacking Concepts
Hacking Phases: Recon, Scanning, Gaining Access, Maintaining Access, Covering Tracks
Cyber Kill Chain and Attack Lifecycle
MITRE ATT&CK Framework Overview
Legal Frameworks and Compliance in Ethical Hacking
Types of Penetration Testing: Black-box, White-box, Grey-box
Information Security Standards and Laws

Passive and Active Reconnaissance Techniques
Open Source Intelligence (OSINT) Methodology
Google Dorks and Search Engine Footprinting
Shodan for Internet-Connected Device Discovery
Maltego for Link Analysis and Visualisation
Social Media Footprinting and Employee Profiling
DNS Enumeration and Email Harvesting
Recon-ng and theHarvester Tooling

TCP/IP Packet Analysis and Protocols
Nmap Port Scanning Techniques (SYN, UDP, ACK, FIN)
OS Fingerprinting: Active and Passive
Service Version Detection and Banner Grabbing
Nessus Vulnerability Scanner Configuration
Network Mapping and Topology Discovery
Zenmap GUI for Visual Network Scanning

NetBIOS Enumeration Techniques
SNMP Enumeration and Community String Exploitation
LDAP Enumeration and Active Directory Querying
NTP Enumeration and Time-Based Attacks
SMB Enumeration and Share Discovery
DNS Zone Transfer and Brute-Force Enumeration
RPC Enumeration and Endpoint Mapping
Metasploit Auxiliary Modules for Enumeration

Vulnerability Classification and Scoring
CVE Database and CVSS Scoring System
Vulnerability Scanning with Nessus and OpenVAS
Manual Vulnerability Assessment Techniques
Risk Prioritisation and Remediation Planning
Zero-Day Vulnerability Analysis and Disclosure

Password Cracking: Online and Offline Techniques
Rainbow Table Attacks and Hash Cracking
Privilege Escalation: Vertical and Horizontal
Executing Applications and Planting Backdoors
Keyloggers and Spyware Deployment
Covering Tracks and Log Manipulation
Metasploit Exploitation Framework Deep Dive

Malware Types: Virus, Worm, Trojan, Ransomware, Rootkit
Static Malware Analysis Techniques
Dynamic Malware Analysis and Behaviour Monitoring
Reverse Engineering Basics
Advanced Persistent Threat (APT) Malware
Malware Indicators of Compromise (IOCs)
Sandbox Analysis and Automated Malware Tools

Network Sniffing Concepts and Protocols
Passive vs Active Sniffing Techniques
Wireshark Packet Capture and Analysis
ARP Poisoning and Cache Manipulation
MAC Flooding and Switch Security
Man-in-the-Middle (MITM) Attack Setup
DNS Poisoning and Cache Manipulation
SSL Stripping and HTTPS Downgrade Attacks

Social Engineering Techniques and Psychology
Phishing, Spear Phishing, and Whaling Campaigns
Voice Phishing (Vishing) and SMS Phishing (Smishing)
Identity Theft and Credential Harvesting
Insider Threats and Impersonation Attacks
Physical Social Engineering: Tailgating, Baiting
Social Engineering Toolkit (SET) Practical Labs

DoS and DDoS Attack Techniques Overview
Volumetric Attacks: UDP Flood, ICMP Flood
Protocol Attacks: SYN Flood, Ping of Death
Application Layer Attacks: HTTP Flood, Slowloris
Botnet Operations and C2 Infrastructure
Amplification Attacks: DNS, NTP, SSDP
DDoS Mitigation Tools and Countermeasures

TCP Session Hijacking Mechanics
Cookie Theft and Session Token Analysis
Cross-Site Request Forgery (CSRF) Exploitation
MITM in Session Context
Network-Level Session Hijacking
Application-Level Session Attacks
Token Prediction and Session Fixation

IDS/IPS Evasion Techniques
Firewall Rules Bypass Strategies
Packet Fragmentation and Reassembly Attacks
Protocol and Port Tunneling
Honeypot Detection and Fingerprinting
Traffic Obfuscation and Encoding Methods
Proxy and VPN Usage for Anonymity

Web Server Vulnerabilities and Attack Surface
Banner Grabbing and Server Fingerprinting
Web Server Configuration Weaknesses
Metasploit Web Exploitation Modules
Nikto Web Server Scanner
Patch Management and Version Disclosure Issues
Server-Side Vulnerabilities: Path Traversal, RFI, LFI

OWASP Top 10 Vulnerabilities Deep Dive
Cross-Site Scripting: Stored, Reflected, and DOM-Based
Cross-Site Request Forgery (CSRF) Attacks
Insecure Direct Object Reference (IDOR) Exploitation
Broken Authentication and Session Management
Security Misconfigurations and Sensitive Data Exposure
Burp Suite Web Application Testing Workflow

SQL Injection Types: In-Band, Blind, and Time-Based
Error-Based Data Extraction Techniques
Manual SQL Injection Testing Methodology
Automated SQLi with sqlmap
Stored Procedure Abuse and Second-Order SQLi
NoSQL Injection Against MongoDB and Others
WAF Bypass Techniques and Evasion Strategies

802.11 Standards and Wireless Security Protocols
WEP Cracking with Aircrack-ng
WPA/WPA2/WPA3 Password Cracking
Rogue Access Point and Evil Twin Attacks
PMKID Attack (Clientless WPA2 Cracking)
Wi-Fi Sniffing and Packet Injection
Bluetooth and BLE Attack Techniques

Android and iOS Attack Surface Analysis
Mobile Malware Types and Distribution
Rooting Android and Jailbreaking iOS
Mobile App Vulnerabilities and Reverse Engineering
OWASP Mobile Top 10 Vulnerabilities
ADB (Android Debug Bridge) Exploitation
Mobile Device Management (MDM) Bypass

IoT Attack Surface and Threat Landscape
Firmware Analysis and Extraction Techniques
MQTT and CoAP Protocol Attacks
Shodan for IoT Device Discovery
SCADA/ICS Vulnerabilities and Attack Scenarios
Industrial Protocol Attacks: Modbus, DNP3
Smart Device and Embedded System Exploitation

Cloud Attack Vectors and Threat Models
S3 Bucket Misconfiguration and Data Exposure
IAM Privilege Escalation in AWS/Azure/GCP
Container Security: Docker and Kubernetes Attacks
Serverless Security and Function Injection
CloudTrail Log Analysis and Evasion
Multi-Cloud Environment Exploitation Techniques

Encryption Algorithms: AES, RSA, and ECC
Public Key Infrastructure (PKI) and Certificate Management
Digital Signatures and Non-Repudiation
SSL/TLS Protocol Analysis and Weaknesses
Steganography Concepts and Tools
Cryptanalysis Basics: Brute Force, Known Plaintext
Disk Encryption Tools: BitLocker, VeraCrypt

Have Questions?

Chat with our EC-Council certified trainers instantly.

WhatsApp Us Call Us

Certified Ethical

Hacker

The World Standard in Ethical Hacking

World's #1 Ethical Hacking Cert

Hands-On Lab Platform

ANSI Accredited

Highest ROI Certification

The Complete C|EH Skill Set

C|EH Is for Offensive Security Professionals

C|EH — 20 Course Modules

312-50 Exam Information

Become a Certified Ethical Hacker Today