Certified Ethical Hacker V12

Overview

The EC-Council;s Certified Ethical Hacker (CEH v12) Training program will enhance your knowledge of essential security fundamentals. Certified Ethical Hacker (CEH V12) certification course is one of the most sought-after security qualifications in the world. This internationally recognized security course validates your ability to discover weaknesses in the organization;s network infrastructure and aids in the effective combat of cyber-attacks.

The C|EH v12 program is a specialized, one-of-a-kind training program to teach everything about ethical hacking with hands-on training, labs, assessment, a mock engagement (practice), and a global hacking competition.

This certification is a DoD Approved 8570 Baseline Certification and meets DoD 8140/8570 training requirements.

Since the threat in the cyber world is increasing continuously, the industry needs cyber security professionals who prevent threats and attacks in organizations worldwide. The Certified Ethical Hacker (C|EH v12) program is one of the most respected certifications in the cybersecurity field.

The EC-Council has introduced new updated technologies in C|EH v12 program, including the MITRE ATT&CK Framework, Diamond Model of Intrusion Analysis, Techniques for Establishing Persistence, Evading NAC and Endpoint Security, Fog Computing, Edge Computing, and Grid Computing. These updated technologies will prepare you to think like a hacker, so you have the skills to protect your infrastructure.

This is the professional edition of the EC Council Certified Ethical Hacker and includes;

CEHv12 e-book (and next version)

x5 CEHv12 official videos

6 months access to CEHv12 labs

CEHv12 exam voucher with 1 retake attempt (to be used within 6 months)

CEH Engage

+

Prerequisites

Basic understanding of network essentials and core concepts, including server and network components.

Target Audience:

• Ethical Hackers
• System Administrators
• Network Administrators
• Engineers
• Web Managers
• Auditors
• Security Professionals

+

Delegates will learn how to

After completing the C|EH v12 certification program, you will have a thorough understanding of:

• Ethical hacking fundamentals, cyber kill chain concepts, an overview of information security, security measures, and numerous information security laws and regulations.
• Footprinting concepts and methodologies, as well as using footprinting tools and countermeasures.
• Enumeration techniques include NFS enumeration and related tools, DNS cache snooping, and DNSSEC Zone walking along with the countermeasures.
• Concepts of vulnerability assessment, its categories and strategies, and first-hand exposure to the technologies used in industry.
• Phases of system hacking, attacking techniques to obtain, escalate, and maintain access on the victim and covering tracks.
• Malware threats, analysis of various viruses, worms, and trojans like Emotet and battling them to prevent data. APT and Fileless Malware concepts have been introduced to this domain.
• Packet sniffing concepts, techniques, and protection against the same.
• Social engineering concepts and related terminologies like identity theft, impersonation, insider threats, social engineering techniques, and countermeasures.
• Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks, use cases, and attack and defense tools.
• Security solutions like firewall, IPS, honeypots, evasion, and protection.
• Operational Technology (OT) essentials, threats, attack methodologies, and attack prevention. The concept of OT is a new addition.
• Recognizing the vulnerabilities in IoT and ensuring the safety of IoT devices.
• Encryption algorithms, Public Key Infrastructure (PKI), cryptographic attacks, and cryptanalysis.
• Cloud computing, threats and security, essentials of container technology, and serverless computing.

+

Outline

C|EH v12 program is divided into 20 modules:

Module 1: Introduction to Ethical Hacking

Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Key topics covered:

• Elements of Information Security
• Cyber Kill Chain Methodology
• MITRE ATT&CK Framework
• Hacker Classes
• Ethical Hacking
• Information Assurance (IA)
• Risk Management
• Incident Management
• PCI DSS
• HIPPA
• SOX
• GDPR

Module 2: Foot Printing and Reconnaissance

Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.

Hands-On Lab Exercises:

Over 30 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform foot printing on the target network using search engines, web services, and social networking sites
• Perform website, email, whois, DNS, and network foot printing on the target network

Module 3: Scanning Networks

Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Hands-On Lab Exercises:

Over 10 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform host, port, service, and OS discovery on the target network
• Perform scanning on the target network beyond IDS and firewall

Module 4: Enumeration

Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, plus associated countermeasures.

Hands-On Lab Exercises:

Over 20 hands-on exercises with real-life simulated targets to build skills on how to:

Perform NetBIOS, SNMP, LDAP, NFS, DNS, SMTP, RPC, SMB, and FTP Enumeration

Module 5: Vulnerability Analysis

Learn how to identify security loopholes in a target organization;s network, communication infrastructure, and end systems.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform vulnerability research using vulnerability scoring systems and databases
• Perform vulnerability assessment using various vulnerability assessment tools

Module 6: System Hacking

Learn about the various system hacking methodologies-including steganography, steganalysis attacks, and covering tracks.

Hands-On Lab Exercises:

Over 25 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform an active online attack to crack the system;s password
• Escalate privileges using privilege escalationtools
• Escalate privileges in Linux machine
• Hide data using steganography
• Clear Windows and Linux machine logs using various utilities
• Hiding artifacts in Windows and Linux machines

Module 7: Malware Threats

Get an introduction to the different types of malware, such as Trojans, viruses, and worms, as well as system auditing for malware attacks, malware analysis, and countermeasures.

Hands-On Lab Exercises:

Over 20 hands-on exercises with real-life simulated targets to build skills on how to:

• Gain control over a victim machine using malware
• Infect the target system using a virus
• Perform static and dynamic malware analysis

Key topics covered:

• Malware, Components of Malware
• APT
• Trojan
• Types of Trojans
• Exploit Kits
• Virus
• Virus Lifecycle
• Types of Viruses
• Ransomware
• Computer Worms
• Fileless Malware
• Malware Analysis
• Static Malware Analysis
• Dynamic Malware Analysis
• Virus Detection Methods
• Trojan Analysis
• Virus Analysis
• Fileless Malware Analysis
• Anti-Trojan Software
• Antivirus Software
• Fileless Malware Detection Tools

Module 8: Sniffing

Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.

Hands-On Lab Exercises:

Over 10 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform MAC flooding, ARP poisoning, MITM and DHCP starvation attack
• Spoof a MAC address of Linux machine
• Perform network sniffing using various sniffing tools
• Detect ARP poisoning in a switch-based network

Key topics covered:

• Network Sniffing
• Wiretapping
• MAC Flooding
• DHCP Starvation Attack
• ARP Spoofing Attack
• ARP Poisoning
• ARP Poisoning Tools
• MAC Spoofing
• STP Attack
• DNS Poisoning
• DNS Poisoning Tools
• Sniffing Tools
• Sniffer Detection Techniques
• Promiscuous Detection Tools

Module 9: Social Engineering

Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.

Hands-On Lab Exercises:

Over 4 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform social engineering using Various Techniques
• Spoof a MAC address of a Linux machine
• Detect a phishing attack
• Audit an organization;s security for phishing attacks

Key topics covered:

• Social Engineering
• Types of Social Engineering
• Phishing
• Phishing Tools
• Insider Threats/Insider Attacks
• Identity Theft

Module 10: Denial-of-Service

Learn about different Denial-of-Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform a DoS and DDoS attack on a target host
• Detect and protect against DoS and DDoS attacks

Key topics covered:

• DoS Attack, DDoS Attack
• Botnets
• DoS/DDoS Attack Techniques
• DoS/DDoS Attack Tools
• DoS/DDoS Attack Detection Techniques
• DoS/DDoS Protection Tools

Module 11: Session Hijacking

Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

Hands-On Lab Exercises:

Over 4 hands-on exercises with real-life simulated targets to build skills on how to:

• Perform session hijacking using various tools
• Detect session hijacking

Key topics covered:

• Session Hijacking
• Types of Session Hijacking
• Spoofing
• Application-Level Session Hijacking
• Man-in-the-Browser Attack
• Client-side Attacks
• Session Replay Att