BUILD TOMORROW.
FOR A MORE
SECURE TOMORROW.
CEH Practical
EC-Council / CEH-PracticalBuild the skills for your next mission.
This advanced certification course provides an intensive, hands-on experience designed to validate the practical, real-world skills of ethical hacking.
Course objectives
Build practical skills across the key domains covered in CEH Practical (CEH-Practical).
Information Gathering and Vulnerability AssessmentPerform active and passive reconnaissance to gather information about a target organization and its infrastructure.
- Perform active and passive reconnaissance to gather information about a target organization and its infrastructure.
- Utilize various tools and techniques for footprinting, including DNS enumeration, WHOIS lookup, and Google dorking.
- Conduct network scanning to identify live hosts, open ports, and services running on target systems.
- Perform vulnerability scanning using automated tools to detect common vulnerabilities and misconfigurations.
- Analyze scan results to prioritize vulnerabilities based on severity and potential impact.
- Identify and enumerate operating systems and applications running on target systems.
System Hacking and Malware AnalysisExecute various password cracking techniques (e.g., brute-force, dictionary, rainbow table) against different authentication mechanisms.
- Execute various password cracking techniques (e.g., brute-force, dictionary, rainbow table) against different authentication mechanisms.
- Perform privilege escalation attacks on Windows and Linux systems.
- Demonstrate techniques for maintaining access to compromised systems (e.g., backdoors, rootkits).
- Analyze the behavior of different types of malware (e.g., viruses, worms, Trojans, ransomware) using static and dynamic analysis.
- Implement anti-forensics techniques to evade detection and remove traces of an attack.
- Utilize keyloggers and spyware to capture sensitive information.
Network Hacking and Perimeter DefensePerform various network sniffing and traffic analysis techniques.
- Perform various network sniffing and traffic analysis techniques.
- Conduct Man-in-the-Middle (MITM) attacks to intercept and manipulate network traffic.
- Exploit weaknesses in wireless networks (e.g., WEP, WPA/WPA2-PSK) to gain unauthorized access.
- Bypass firewalls, Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS).
- Perform Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks and identify their impact.
- Implement techniques for evading network-based security controls.
Web Application HackingIdentify and exploit SQL Injection vulnerabilities to extract data or gain control.
- Identify and exploit SQL Injection vulnerabilities to extract data or gain control.
- Perform Cross-Site Scripting (XSS) attacks (reflected, stored, DOM-based).
- Exploit Broken Authentication and Session Management vulnerabilities.
- Identify and exploit Insecure Direct Object References and Security Misconfigurations.
- Perform File Upload vulnerabilities and Remote Code Execution (RCE) attacks.
- Utilize web application proxies and scanners for vulnerability discovery.
- Conduct API hacking and exploit vulnerabilities in web services.
Cloud, IoT, and Operational Technology HackingIdentify common vulnerabilities and misconfigurations in cloud environments (e.g., AWS, Azure, GCP).
- Identify common vulnerabilities and misconfigurations in cloud environments (e.g., AWS, Azure, GCP).
- Perform attacks targeting cloud services and infrastructure.
- Identify and exploit vulnerabilities in IoT devices and ecosystems.
- Demonstrate understanding of attack vectors against SCADA/ICS and other OT systems.
- Utilize specialized tools and techniques for assessing the security of IoT and OT environments.
Find your DoD 8140 pathway
Explore how this training may align to DoD 8140 work roles and proficiency levels.
About this course
This advanced certification course provides an intensive, hands-on experience designed to validate the practical, real-world skills of ethical hacking. Moving beyond theoretical knowledge, the CEH Practical focuses on applying offensive security techniques and tools within a live, emulated environment. Participants will engage in a series of challenging scenarios, simulating real-world attack vectors and vulnerabilities, to demonstrate their proficiency in penetration testing methodologies, vulnerability assessment, and the strategic exploitation of systems and networks. This course is crucial for cybersecurity professionals seeking to prove their ability to identify and mitigate threats effectively through an attacker's lens.
Training alone does not establish DoD 8140 qualification. Confirm position-specific requirements with your organization.