EHEthical Hacker
Course Overview
This Certified Ethical Hacker Version 12 course is a comprehensive five-day training program designed to equip participants with a profound understanding of ethical hacking and cybersecurity concepts. Over the course of the program, participants will be introduced to various aspects of ethical hacking, including network and system hacking, malware threats, web and network security, vulnerability analysis, and data security. The curriculum also covers emerging areas like IoT and mobile security. Each day includes hands-on lab sessions to provide practical experience with tools and techniques. In addition to technical skills, the course emphasizes ethical considerations and prepares participants for the Certified Ethical Hacker (CEH) certification exam. The training concludes with a thorough review of key concepts and a dedicated session for exam preparation.
Key Takeaways
Course Outline
•Understanding what ethical hacking is
•Differentiating between white, black and grey hat hackers
•Reviewing the ethics and legal implications of
hacking
•Exploring the phases of ethical hacking
•Delving into TCP/IP and OSI Models
•Understanding network topologies: star, bus, ring, mesh, and hybrid
•Examining types of networks: LAN, WAN, MAN
•Introducing common networking devices: Routers, Switches, Firewalls
•Setting up the lab environment
•Introduction to virtual machines and their use in ethical hacking
•Understanding VPNs and their importance in maintaining anonymity
•Examining Footprinting, its techniques, and tools
•Understanding network scanning techniques and tools
•Studying Enumeration, its methods, and tools
•Understanding methods for gaining access
•Studying privilege escalation techniques
•Learning how hackers maintain access through backdoors
•Exploring methods for covering tracks and clearing
logs
•Introduction to various types of Malware: Virus,
Worm, Trojan, etc.
•Studying how malware can infect systems
•Exploring anti-malware solutions and their effectiveness
•Hands-on experience with password cracking tools: John the Ripper, Hydra
•Introduction to malware analysis using tools like VirusTotal, Cuckoo Sandbox
•Understanding the concept of sniffing and its techniques
•Exploring social engineering, human hacking techniques
•Studying common web server vulnerabilities and mitigation
•Understanding web application vulnerabilities:
SQL Injection, Cross-Site Scripting (XSS), Cross-Site
Request Forgery (CSRF)
•Demonstrating web application hacking tools:
OWASP ZAP, Burp Suite
•Learning about Firewalls, IDS, IPS, and honeypots
•Understanding wireless network threats and countermeasures
•Exploring IoT and cloud security challenges and best practices
•Practicing SQL Injection and XSS attacks in a controlled environment
•Learning to use tools for evasion and bypassing firewalls: hping3, Nmap
•Understanding the concept and impact of DoS/DDoS attacks
•Studying botnets and their role in launching DDoS attacks
•Exploring DoS/DDoS prevention techniques
•Learning to conduct vulnerability scanning using tools
like Nessus, OpenVAS
•Understanding the stages and methodologies of penetration testing
•Exploring the principles of cryptography, symmetric
and asymmetric encryption
•Understanding Public Key Infrastructure (PKI)
•Exploring SSL/TLS security, certificates, and how they work
•Practicing vulnerability scanning using various tools
•Hands-on experience with cryptanalysis tools: Wireshark, OpenSSL
•Understanding mobile platform attack vectors, mobile malware
•Studying mobile security guidelines and tools
•Exploring cloud security, its risks and best practices
•Understanding the security risks associated with
IoT devices
•Exploring methods for securing IoT devices
•Discussing emerging attack vectors and staying
ahead of new threats
•Comprehensive review of all topics covered in the course
•Open discussion and Q&A on all topics
•Revisiting any topics as requested by participants
•Reviewing the format and rules of the Certified Ethical Hacker (CEH) exam
•Discussing effective study techniques for exam preparation
•Going through sample questions and discussing the answers
•Conducting final practical exercises to apply everything learned in the course
•Collecting course feedback and discussing potential improvements
•Discussing next steps for further learning and how to continue developing ethical hacking skills after the course ends.
Who Should Attend?
•IT Professionals: Those who are working in various IT roles and want to enhance their understanding of cybersecurity threats and solutions.
•Security Officers: Professionals responsible for securing IT infrastructure, including network administrators, system administrators, and security officers.
•Auditors: IT auditors who need to understand the hacking techniques to properly assess the security of the system.
•Site Administrators: Those who are responsible for the website or web application security.
•Individuals Seeking CEH Certification: Anyone planning to achieve the Certified Ethical Hacker (CEH) certification to validate their ethical hacking skills.