Become a Certified Ethical Hacker: C|EH v12 Certification

Become a
Certified Ethical Hacker (C|EH)

Name*

Phone*

Email*

Address*

What are you interested in ?*

Select Option*

Which degree are you interested in?*

How do you prefer to learn?**

Please let us know how we can help!

Agreement*

I agree to the Terms of Use and Privacy Policy*

CERTIFIED PROFESSIONALS

IN 145 COUNTRIES

Are you ready to get Certified?

Test Your Skills!

Cybersecurity Incidents Are Exploding.
So Are Cyber Jobs!

Build Your Career With the Most In-Demand Ethical Hacking Certification in the World, Certified Ethical Hacker

The World’s Number 1 Ethical Hacking Certification
A Structured Professional Course for Aspiring Cyber Professionals
Work Anywhere With C|EH- It’s Globally Recognized
Comprehensive Program to Master the 5 Phases of Ethical Hacking
Hands-On Learning With CyberQ^TM
Flexible Learning Options : Live, Online, or Hybrid

Become a C|EH

NEED TRAINING?

EC-Council’s Official delivery platform includes your study material, virtual labs and gives you the most flexible options for training to fit your busy work schedule!

Training Options

Talk to an Expert

The Encyclopedia of Ethical Hacking

How C|EH v12 Empowers You:

Unique Learn, Certify, Engage and Compete Methodology for Aspiring Cyber Professionals
Learn Ethical Hacking in a Structured Setting Across 20 Domains
Build Skills With over 220 Challenge-Based, Hands-On Labs with CyberQ™ Labs
Gain Experience With over 500 Unique Attack Techniques

Learn Commercial-Grade Hacking Tools and Techniques
Engage: “Hack” a Real Organization With C|EH^® Elite to Get Experience
Compete With Hackers Around the World as Part of the C|EH^®Elite Program
Attain the Most Recognized Credential in the Cybersecurity Industry :C|EH^®

Become a C|EH

A Revolutionary Way to Learn Ethical Hacking

Our exclusive Learn | Certify | Engage | Compete framework covers not only a comprehensive training program to prepare you for the certification exam, but also the industry’s most robust, in-depth, hands-on lab experience of any cybersecurity program available. C|EH v12 will teach you the latest commercial-grade hacking tools, techniques, and methodologies used by hackers and information security professionals to lawfully hack an organizations.

Gain Skills

5 days of training
20 modules
Over 220 hands-on-labs with competition flags
Over 3,500 hacking tools
Learn how to hack multiple operating systems

(Windows 11, Windows Servers, Linux, Ubuntu, Android)

Gain Experience

C|EH Knowledge Exam

125 multiple-choice questions
4 hours
ANSI 17024 accredited

C|EH Practical Exam

6 hours practical exam
20 scenario based questions
Prove your skills and abilities

Gain Recognition

Conduct a real-world ethical hacking assignment
Apply the 5 phases
- Reconnaissance
- Scanning
- Gaining Access
- Maintaining Access
- Covering Your Tracks

Gain Respect

New challenges every month
4 hour competition
Compete with your peers all over the world
Hack your way to the top of the Leaderboard
Gain recognition
Challenges

Are you ready to get Certified?

Test Your Skills!

Select Your Course Kit

While all C|EH course kits have complete access to eCourseware and include an exam voucher, a few additional features and learning materials can be added to build deeper expertise and gain practical experience. This means that there is a C|EH package to suit everyone’s learning requirements.

Learn, Certify
Engage & Compete

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	10
Exam Retakes**	Unlimited#

Inquire Now

Learn, Certify
& Engage

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	5
Exam Retakes**	3

Inquire Now

Learn & Certify

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	2
Exam Retakes**	1

Inquire Now

*Exam Vouchers: New to C|EH, EC-Council now includes a free retake voucher for EVERY courseware package: 1 exam retake for standard C|EH courseware, 3 retakes for C|EH Pro, and unlimited retakes for C|EH Elite. Candidates may activate this benefit through the EC-Council student portal (ASPEN).

**Exam Retakes: This benefit provides candidates with the respective exam voucher on the ECC EXAM portal but excludes proctor administration fees which will apply for each attempt of the examination. Applicable to CEH Exam only. Please contact your training provider for details.

#Maximum 4 exam retakes allowed per year as per exam policy.

Select Your Course Kit

While all CEH course kits have complete access to e-courseware and include an exam voucher, a few additional features and learning materials can be added to build deep expertise and gain practical experience. This ensures that there is a CEH package to suit everyone’s learning requirements.

Learn, Certify
Engage & Compete

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	10
Exam Retakes**	Unlimited#

Inquire Now

Learn, Certify
& Engage

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	5
Exam Retakes**	5

Inquire Now

Learn & Certify

eCourseware
Exam Voucher*
Next Version of eCourseware
6 Months of Official Labs
C\|EH Engage
Global C\|EH Challenges
Exam Preparation
C\|EH Practical Exam
Ethical Hacking Video Library	2
Exam Retakes**	1

Inquire Now

#Maximum 4 exam retakes allowed per year as per exam policy.

LearnCertifyEngageCompete

What You Will Learn

C|EH is divided into 20 modules and delivered through a carefully curated training plan that typically spans across 5 days. As you progress through your training, each module offers extensive hands-on lab components that allow you to practice the techniques and procedures taught in the program in real-time on live machines.

Ethical Hacking Labs

With over 220 hands-on labs, conducted in our cyber range environment, you will have the opportunity to practice every learning objective in the course on live machines and vulnerable targets. Pre-loaded with over 3,500 hacking tools and a variety of operating systems, you will gain unprecedented exposure to and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems on the market. Our range is web accessible, allowing you to study and practice from anywhere with a connection.

How You Will Get Certified

Prove Your Skills and Abilities With Online, Practical Examinations

ceh

C|EH Certification

Certified Ethical Hacker Certification

The C|EH exam is a 4-hour exam with 125 multiple-choice questions. This knowledge-based exam will test your skills in Information Security Threats and Attack Vectors, Attack Detection, Attack Prevention, Procedures, Methodologies and more!

C|EH Practical Certification

C|EH Practical is a 6-hour, rigorous exam that requires you to demonstrate the skills and abilities of ethical hacking techniques such as:

Port scanning tools (e.g., Nmap, Hping)
Vulnerability detection
Attacks on a system (e.g., DoS, DDoS, session hijacking, webserver and web application attacks, SQL injection, wireless threats)
SQL injection methodology and evasion techniques
Web application security tools (e.g., Acunetix WVS)
SQL injection detection tools (e.g., IBM Security AppScan)
Communication protocols

This is the next step to becoming a C|EH Master after you have achieved your C|EH certification. Within C|EH Practical, you have a limited amount of time to complete 20 challenges that test your skills and proficiency in a performance-based cyber range. This exam is NOT a simulation and incorporates a live corporate network of VMs and applications with solutions to uncover vulnerabilities.

C|EH Master

Upon Completing the C|EH (Master) program, which consists of C|EH and C|EH (Practical), the C|EH (Master) designation is awarded. C|EH Masters have shown proficiency at a master level in the knowledge, skills, and abilities of ethical hacking with a total 6 hours of testing to prove their competency. Top top 10 performers in both C|EH and C|EH Practical exams are showcased on the C|EH Master Global Ethical Hacking Leaderboard.

The C|EH Exam at a Glance

How You Will Engage

The C|EH v12 program helps you develop real-world experience in ethical hacking through the hands-on C|EH practice environment. C|EH Engage equips you with the skills to prove that you have what it takes to be a great ethical hacker.

Your security assessment objectives will be presented as a series of flags (questions you must answer in the Cyber Range by performing ethical hacking activities on the target organization).

New to C|EH v12, students will embark on their first emulated ethical hacking engagement. This 4-phase engagement requires students to think critically and test the knowledge and skills gained by capturing a series of flags in each phase, demonstrating the live application of skills and abilities in a consequence-free environment through EC-Council’s new Cyber Range.

As you complete your training and hands-on labs, C|EH Engage lets you apply everything you have learned in a mock ethical hacking engagement. This 4-part security engagement gives you a real ethical hacking engagement experience from start to finish against an emulated organization. Using our capture-the-flag-style range, you will complete your engagement by answering “flag” questions as you progress.

PHASE 1	PHASE 2	PHASE 3	PHASE 4
Vulnerability Assessment	Gaining Access	Perimeter and Web App Exploitation	Mobile, IoT, OT Exploitation
Foot Printing & Reconnaissance Scanning Enumeration Vulnerability Analysis	System Hacking Malware Threats Sniffing Social Engineering Denial-of-Service	Session Hijacking Evading IDS Firewalls Honeypots Hacking Web Servers Hacking Web Applications SQL Injection	Hacking Wireless Networks Hacking Mobile Platforms IoT Hacking OT Hacking Cloud Computing Cryptography

Where You Will Compete

The C|EH Global Challenges occur every month, providing capture-the-flag style competitions that expose students to various new technologies and platforms, from web applications, OT, IoT, SCADA, and ICS systems to cloud and hybrid environments. Our Compete structure lets ethical hackers fight their way to the top of the leaderboard each month in these 4-hour curated CTFs. Objective-based flags are designed around the ethical hacking process, keeping skills current, testing critical thinking abilities, and covering the latest vulnerabilities and exploits as they are discovered. Hosted 100% online in EC-Council’s Cyber Range, candidates race the clock in scenario-based engagements against fully developed network and application environments with real operating systems, real networks, tools, and vulnerabilities to practice, engage, compete, build, and hone their cyber skills against various new target organizations.

New Challenges Every Month

Month	Skill Challenge
October 2022	OWASP Top 10 Web Application Threat Vectors
November 2022	Ransomware/Malware Analysis
January 2023	System Hacking and Privilege Escalation
February 2023	Web Application Hacking and Pen Testing
March 2023	Cloud Attack/Hacking
April 2023	Social Engineering/Phishing attacks
May 2023	IoT Attack/Hacking
June 2023	Wi-Fi Network Attack/Hacking
July 2023	DOS/DDoS Attack
August 2023	Mobile Attack/Hacking
September 2023	Supply Chain Cyber Attacks

Course Outline

20 Modules that help you master the foundations of
Ethical Hacking and prepare to challenge the CEH certification exam.

Module 01: Introduction to Ethical Hacking

Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Key topics covered:

Elements of Information Security, Cyber Kill Chain Methodology, MITRE ATT&CK Framework, Hacker Classes, Ethical Hacking, Information Assurance (IA), Risk Management, Incident Management, PCI DSS, HIPPA, SOX, GDPR

Module 02: Foot Printing and Reconnaissance

Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.

Hands-On Lab Exercises:

Over 30 hands-on exercises with real-life simulated targets to build skills on how to:

Perform foot printing on the target network using search engines, web services, and social networking sites
Perform website, email, whois, DNS, and network foot printing on the target network

Module 03: Scanning Networks

Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Hands-On Lab Exercises:

Over 10 hands-on exercises with real-life simulated targets to build skills on how to:

Perform host, port, service, and OS discovery on the target network
Perform scanning on the target network beyond IDS and firewall

Module 04: Enumeration

Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, plus associated countermeasures.

Hands-On Lab Exercises:

Over 20 hands-on exercises with real-life simulated targets to build skills on how to:

Perform NetBIOS, SNMP, LDAP, NFS, DNS, SMTP, RPC, SMB, and FTP Enumeration

Module 05: Vulnerability Analysis

Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

Perform vulnerability research using vulnerability scoring systems and databases
Perform vulnerability assessment using various vulnerability assessment tools

Module 06: System Hacking

Learn about the various system hacking methodologies—including steganography, steganalysis attacks, and covering tracks—used to discover system and network vulnerabilities.

Hands-On Lab Exercises:

Over 25 hands-on exercises with real-life simulated targets to build skills on how to:

Perform Online active online attack to crack the system’s password
Perform buffer overflow attack to gain access to a remote system
Escalate privileges using privilege escalation tools
Escalate privileges in linux machine
Hide data using steganography
Clear Windows and Linux machine logs using various utilities
Hiding artifacts in Windows and Linux machines

Module 07: Malware Threats

Get an introduction to the different types of malware, such as Trojans, viruses, and worms, as well as system auditing for malware attacks, malware analysis, and countermeasures.

Hands-On Lab Exercises:

Over 20 hands-on exercises with real-life simulated targets to build skills on how to:

Gain control over a victim machine using Trojan
Infect the target system using a virus
Perform static and dynamic malware analysis

Key topics covered:

Malware, Components of Malware, APT, Trojan, Types of Trojans, Exploit Kits, Virus, Virus Lifecycle, Types of Viruses, Ransomware, Computer Worms, Fileless Malware, Malware Analysis, Static Malware Analysis, Dynamic Malware Analysis, Virus Detection Methods, Trojan Analysis, Virus Analysis, Fileless Malware Analysis, Anti-Trojan Software, Antivirus Software, Fileless Malware Detection Tools

Module 08: Sniffing

Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.

Hands-On Lab Exercises:

Over 10 hands-on exercises with real-life simulated targets to build skills on how to:

Perform MAC flooding, ARP poisoning, MITM and DHCP starvation attack
Spoof a MAC address of Linux machine
Perform network sniffing using various sniffing tools
Detect ARP poisoning in a switch-based network

Key topics covered:

Network Sniffing, Wiretapping, MAC Flooding, DHCP Starvation Attack, ARP Spoofing Attack, ARP Poisoning, ARP Poisoning Tools, MAC Spoofing, STP Attack, DNS Poisoning, DNS Poisoning Tools, Sniffing Tools, Sniffer Detection Techniques, Promiscuous Detection Tools

Module 09: Social Engineering

Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.

Hands-On Lab Exercises:

Over 4 hands-on exercises with real-life simulated targets to build skills on how to:

Perform social engineering using Various Techniques
Spoof a MAC address of a Linux machine
Detect a phishing attack
Audit an organization’s security for phishing attacks

Key topics covered:

Social Engineering, Types of Social Engineering, Phishing, Phishing Tools, Insider Threats/Insider Attacks, Identity Theft

Module 10: Denial-of-Service

Learn about different Denial-of-Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

Perform a DoS and DDoS attack on a target host
Detect and protect against DoS and DDoS attacks

Key topics covered:

DoS Attack, DDoS Attack, Botnets, DoS/DDoS Attack Techniques, DoS/DDoS Attack Tools, DoS/DDoS Attack Detection Techniques, DoS/DDoS Protection Tools

Module 11: Session Hijacking

Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

Hands-On Lab Exercises:

Over 4 hands-on exercises with real-life simulated targets to build skills on how to:

Perform session hijacking using various tools
Detect session hijacking

Key topics covered:

Session Hijacking, Types of Session Hijacking, Spoofing, Application-Level Session Hijacking, Man-in-the-Browser Attack, Client-side Attacks, Session Replay Attacks, Session Fixation Attack, CRIME Attack, Network Level Session Hijacking, TCP/IP Hijacking, Session Hijacking Tools, Session Hijacking Detection Methods, Session Hijacking Prevention Tools

Module 12: Evading IDS, Firewalls, and Honeypots

Get introduced to firewall, intrusion detection system, and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.

Hands-On Lab Exercises:

Over 7 hands-on exercises with real-life simulated targets to build skills on how to:

Bypass Windows Firewall
Bypass firewall rules using tunneling
Bypass antivirus

Module 13: Hacking Web Servers

Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.

Hands-On Lab Exercises:

Over 8 hands-on exercises with real-life simulated targets to build skills on how to:

Perform web server reconnaissance using various tools
Enumerate web server information
Crack FTP credentials using a dictionary attack

Key topics covered:

Web Server Operations, Web Server Attacks, DNS Server Hijacking, Website Defacement, Web Cache Poisoning Attack, Web Server Attack Methodology, Web Server Attack Tools, Web Server Security Tools, Patch Management, Patch Management Tools

Module 14: Hacking Web Applications

Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures.

Hands-On Lab Exercises:

Over 15 hands-on exercises with real-life simulated targets to build skills on how to:

- Perform web application reconnaissance using various tools
- Perform web spidering
- Perform web application vulnerability scanning
- Perform a brute-force attack
- Perform Cross-Site Request Forgery (CSRF) Attack
- Identify XSS vulnerabilities in web applications
- Detect web application vulnerabilities using various web application security tools

Key topics covered:

Web Application Architecture, Web Application Threats, OWASP Top 10 Application Security Risks – 2021, Web Application Hacking Methodology, Web API, Webhooks, and Web Shell, Web API Hacking Methodology, Web Application Security

Module 15: SQL Injection

Learn about SQL injection attack techniques, injection detection tools, and countermeasures to detect and defend against SQL injection attempts.

Hands-On Lab Exercises:

Over 4 hands-on exercises with real-life simulated targets to build skills on how to:

Perform an SQL injection attack against MSSQL to extract databases
Detect SQL injection vulnerabilities using various SQL injection detection tools

Key topics covered:

SQL Injection, Types of SQL injection, Blind SQL Injection, SQL Injection Methodology, SQL Injection Tools, Signature Evasion Techniques, SQL Injection Detection Tools

Module 16: Hacking Wireless Networks

Learn about wireless encryption, wireless hacking methodologies and tools, and Wi-Fi security tools

Hands-On Lab Exercises:

Over 3 hands-on exercises with real-life simulated targets to build skills on how to:

Foot Print a wireless network
Perform wireless traffic analysis
Crack WEP, WPA, and WPA2 networks
Create a rogue access point to capture data packets

Key topics covered:

Wireless Terminology, Wireless Networks, Wireless Encryption, Wireless Threats, Wireless Hacking Methodology, Wi-Fi Encryption Cracking, WEP/WPA/WPA2 Cracking Tools, Bluetooth Hacking, Bluetooth Threats, Wi-Fi Security Auditing Tools, Bluetooth Security Tools

Module 17: Hacking Mobile Platforms

Learn about mobile platform attack vectors, Android vulnerability exploits, and mobile security guidelines and tools.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

Hack an Android device by creating binary payloads
Exploit the Android platform through ADB
Hack an Android device by creating APK file
Secure Android devices using various Android security tools

Key topics covered:

Mobile Platform Attack Vectors, OWASP Top 10 Mobile Risks, App Sandboxing, SMS Phishing Attack (SMiShing), Android Rooting, Hacking Android Devices, Android Security Tools, Jailbreaking iOS, Hacking iOS Devices, iOS Device Security Tools, Mobile Device Management (MDM), OWASP Top 10 Mobile Controls, Mobile Security Tools.

Module 18: IoT and OT Hacking

Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.

Hands-On Lab Exercises:

Over 2 hands-on exercises with real-life simulated targets to build skills on how to:

Gather information using Online foot printing tools
Capture and analyze IoT device traffic

Key topics covered:

IoT Architecture, IoT Communication Models, OWASP Top 10 IoT Threats, IoT Vulnerabilities, IoT Hacking Methodology, IoT Hacking Tools, IoT Security Tools, IT/OT Convergence (IIOT), ICS/SCADA, OT Vulnerabilities, OT Attacks, OT Hacking Methodology, OT Hacking Tools, OT Security Tools

Module 19: Cloud Computing

Learn different cloud computing concepts, such as container technologies and server less computing, various cloud-based threats and attacks, and cloud security techniques and tools.

Hands-On Lab Exercises:

Over 5 hands-on exercises with real-life simulated targets to build skills on how to:

Perform S3 Bucket enumeration using various S3 bucket enumeration tools
Exploit open S3 buckets
Escalate IAM user privileges by exploiting misconfigured user policy

Key topics covered:

Cloud Computing, Types of Cloud Computing Services, Cloud Deployment Models, Fog and Edge Computing, Cloud Service Providers, Container, Docker, Kubernetes, Serverless Computing, OWASP Top 10 Cloud Security Risks, Container and Kubernetes Vulnerabilities, Cloud Attacks, Cloud Hacking, Cloud Network Security, Cloud Security Controls, Cloud Security Tools

Module 20: Cryptography

In the final module, learn about cryptography and ciphers, public-key infrastructure, cryptography attacks, and cryptanalysis tools.

Hands-On Lab Exercises:

Over 10 hands-on exercises with real-life simulated targets to build skills on how to:

Calculate MD5 hashes
Perform file and text message encryption
Create and use self-signed certificates
Perform email and disk encryption
Perform cryptanalysis using various cryptanalysis tools

Key topics covered:

Cryptography, Encryption Algorithms, MD5 and MD6 Hash Calculators, Cryptography Tools, Public Key Infrastructure (PKI), Email Encryption, Disk Encryption, Cryptanalysis, Cryptography Attacks, Key Stretching

Common Job Roles for C|EH

Mid-Level Information Security Auditor
Cybersecurity Auditor
Security Administrator
IT Security Administrator
Cyber Defense Analyst
Vulnerability Assessment Analyst
Warning Analyst
Information Security Analyst 1
Security Analyst L1
Infosec Security Administrator

Cybersecurity Analyst level 1, level 2, & level 3
Network Security Engineer
SOC Security Analyst
Security Analyst
Network Engineer
Senior Security Consultant
Information Security Manager
Senior SOC Analyst
Solution Architect
Cybersecurity Consultant

Making an informed decision is difficult, and that’s where EC-Council’s C|EH brochure comes to your rescue. The Certified Ethical Hacker (CEH) credential is the most trusted ethical hacking certification that employers worldwide value, and for good reasons.

The comprehensive curriculum covers the fundamentals of ethical hacking, foot printing and reconnaissance, scanning, enumeration, vulnerability threats, social engineering, SQL injection, and much more.

When you successfully achieve the C|EH certification, you will be equipped with every skill you need to uncover vulnerabilities and secure the systems, networks, applications, databases, and critical data from malicious hackers.

This is only an overview of C|EH and what you will learn.

For complete information, download the brochure now.

Download Brochure

Get Certified

What's New in C|EH

LearnCertifyEngageCompete