Reviews 4,2
Reviews 4,5
EC-Council Certified Ethical Hacker (CEH)
Understanding how attackers think and operate is the foundation for effective IT defense. This CEH training builds practical expertise in ethical hacking – covering real-world techniques, current threat scenarios, and solid security knowledge.
Key topics
- Tools and methods used in systematic attacks on IT systems.
- Identifying and assessing security vulnerabilities, including exploit techniques.
- Protecting networks, cloud infrastructure, and web applications.
- AI-driven attack patterns and corresponding defense strategies.
- Ethical boundaries and legal requirements in IT security work.
Prerequisite
A fundamental understanding of IT systems, networking, and operating systems is expected.
Target group
Designed for professionals in IT security, system administration, and network management.
An internationally recognized qualification for those looking to take on more responsibility in cybersecurity.
Course content
Fundamentals of ethical hacking
- Core principles of information security
- Phases of the cyber kill chain
- Techniques and methods in hacking
- Legal framework for ethical hacking
- Protective measures and countermeasures
- Laws, standards, and compliance
Footprinting and reconnaissance
- Information gathering using search engines
- Reconnaissance through online services
- Analysis of social networks
- Websites as sources of intelligence
- Email-based reconnaissance methods
- Whois queries and registry research
- DNS-based information gathering
- Network-based footprinting
- Social engineering as a reconnaissance method
- Tools for systematic footprinting
- Countermeasures against footprinting
Scanning networks and systems
- Tools for network analysis and discovery
- Locating active devices on the network
- Analyzing open ports and running services
- Operating system identification of target systems
- Scanning through security barriers such as firewalls
- Creating network topology maps
Enumeration of systems and services
- NetBIOS-based system enumeration
- SNMP queries and evaluation
- LDAP directory analysis
- NTP and NFS service enumeration
- SMTP and DNS enumeration
- Additional techniques for system enumeration
- Countermeasures against enumeration
Analyzing and assessing vulnerabilities
- Methods and approaches for vulnerability assessment
- Classification and prioritization of security vulnerabilities
Attacking and compromising systems
- Gaining initial access to target systems
- Escalating system privileges
- Maintaining persistent access
- Clearing logs and covering tracks
Malware and its modes of operation
- Structure and functionality of malware
- Persistent threats through APTs
- How trojans operate
- Viruses, worms, and their propagation
- Fileless attack methods
- Detection and analysis of malicious code
- Preventive countermeasures
- Software solutions for combating malware
Intercepting and analyzing network traffic
- MAC address attacks in network sniffing
- DHCP-based sniffing methods
- ARP poisoning as an attack technique
- Spoofing-based attack variants
- DNS poisoning on networks
- Network sniffing tools
- Countermeasures and protection
- Detection of sniffing activity
Manipulation and deception-based attacks
- Fundamentals of social engineering
- Attack scenarios and methods
- Risks from insider threats
- Identity impersonation on social networks
- Methods of identity theft
- Protection against social engineering attacks
Understanding and defending against DoS and DDoS attacks
- Fundamentals of denial-of-service attacks
- Attack techniques in DoS and DDoS
- Botnets and real-world DDoS scenarios
- Tools for DoS attacks
- Defense and countermeasures
- Tools for protecting against DoS attacks
Seizing and abusing sessions
- Concepts behind session hijacking attacks
- Session takeover at the application level
- Attacks on network sessions
- Tools for session hijacking
- Countermeasures for protection
Bypassing detection and protection systems
- Fundamentals of IDS, IPS, firewalls, and honeypots
- Available solutions and product categories
- Techniques for bypassing IDS
- Methods for circumventing firewalls
- Tools for bypassing IDS and firewalls
- Identifying and detecting honeypots
- Protective measures against bypass attempts
Web server attacks and hardening
- Architecture and functionality of web servers
- Targeted attacks on web servers
- Systematic approach to web server attacks
- Attack tools in the web server domain
- Protection strategies and hardening measures
- Patch management and security updates
- Security solutions for web servers
Attacks on web applications
- Concepts and architectures of web applications
- Typical vulnerabilities in web applications
- Attack approach for web application hacking
- Web APIs, webhooks, and web shell techniques
- Hardening and securing web applications
SQL injection techniques and countermeasures
- How SQL injection works and its fundamentals
- Variants and types of SQL attacks
- Systematic approach to SQL injections
- Attack tools for SQL injection
- Bypassing existing security mechanisms
- Protecting against SQL injection attacks
Attacks on Wi-Fi and Bluetooth
- Fundamentals of wireless technologies
- Encryption methods in wireless networks
- Threat scenarios in wireless networks
- Attack methods on Wi-Fi
- Tools for wireless attacks
- Bluetooth hacking and related techniques
- Protective measures for wireless networks
- Security solutions for the Wi-Fi domain
Security vulnerabilities on mobile devices
- Attack risks on mobile operating systems
- Vulnerabilities in Android environments
- Security issues on iOS devices
- Mobile device management and control mechanisms
- Policies and security solutions for mobile devices
Attacks on IoT and OT environments
- Attack vectors in the Internet of Things
- Fundamentals and concepts of IoT
- Typical attacks on IoT systems
- Hacking methods for IoT infrastructure
- Tools for IoT attacks
- Protective measures for IoT environments
- Attacks on operational technology (OT)
- OT concepts and system architectures
- Threat scenarios in OT networks
- Hacking methods for OT infrastructure
- Tools for OT attacks
- Protective measures for OT environments
Cloud security and cloud hacking
- Fundamentals and models of cloud computing
- Container technologies and their security aspects
- Serverless architectures and associated risks
- Attack surfaces in cloud environments
- Hacking techniques in cloud infrastructure
- Security measures for cloud environments
Cryptographic methods and attack techniques
- Core concepts of cryptography
- Symmetric and asymmetric encryption algorithms
- Tools and libraries for cryptography
- Public key infrastructure (PKI)
- Email encryption and signatures
- Disk and data encryption
- Cryptanalysis and attacks on encryption
- Defense strategies against cryptographic attacks
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What makes the CEH certification stand out?
- CEH is a globally recognized qualification in ethical hacking, teaching how to legally test IT systems for security vulnerabilities.
Who benefits from the CEH certification?
- Suitable for all who want to protect systems and understand attacks: IT security professionals, administrators, analysts, and security managers.
What knowledge is required for CEH?
- A basic understanding of IT systems, networks, and operating systems is helpful. Professional experience in IT is recommended but not required.
How widely is CEH internationally recognized?
- CEH has worldwide recognition and is valued by companies, government agencies, and security organizations as a relevant IT security certification.
How does CEH differ from illegal hacking?
- CEH focuses exclusively on legal and ethical methods. The aim is to strengthen IT security through prevention, detection, and targeted defense.
How long does the CEH certification remain valid?
- The CEH certification is valid for three years and can be renewed through continuing education and the accumulation of credits.
What career paths does CEH open up?
- CEH provides professional opportunities in areas such as IT security, penetration testing, cyber defense, security consulting, and compliance.
