Skip to main content

Certified Ethical Hacker (CEH) v13

Intermediate

$599.00

Certified Ethical Hacker (CEH) v13 prepares you for EC-Council’s 312-50 exam, teaching how attackers work so you can test and defend systems. For security analysts, pen testers and admins.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Download the course outline (PDF)

Certified Ethical Hacker (CEH) v13 prepares you for EC-Council’s CEH certification, exam code 312-50. It teaches you to think and work like an attacker, with permission, so you can find weak spots before real criminals do. It is for security analysts, penetration testers, SOC analysts and system or network administrators who want proven ethical hacking skills.

What you will learn

  • Gather information with footprinting, reconnaissance and OSINT
  • Scan networks with tools such as Nmap and enumerate services
  • Find and rate weaknesses with vulnerability analysis tools
  • Gain and keep access to systems, including with Metasploit
  • Spot malware threats and understand how they spread
  • Carry out sniffing, spoofing, session hijacking and social engineering tests
  • Attack and defend web servers and web apps, including SQL injection
  • Test wireless networks, mobile platforms, IoT and OT devices
  • Assess cloud security risks
  • Apply cryptography and use AI-assisted security tools

Course outline

  1. Information security and ethical hacking overview
  2. Footprinting and reconnaissance
  3. Scanning networks
  4. Enumeration
  5. Vulnerability analysis
  6. System hacking
  7. Malware threats
  8. Sniffing and spoofing
  9. Social engineering
  10. Denial-of-service
  11. Session hijacking
  12. Attack detection and prevention
  13. Hacking web servers
  14. Hacking web applications
  15. SQL injection
  16. Hacking wireless networks
  17. Hacking mobile platforms
  18. IoT and OT hacking
  19. Cloud computing
  20. Cryptography
  21. Challenge lab: put the skills together in a practical exercise

Who this course is for

  • Cybersecurity and SOC analysts
  • Penetration testers and vulnerability assessors
  • System and network administrators who want attack skills
  • IT professionals moving into ethical hacking
  • Law enforcement and military cyber staff

Before you start

You should already understand networking, TCP/IP and common operating systems such as Windows and Linux. EC-Council suggests at least two years of IT security experience if you apply to sit the exam without official training. Security+ level knowledge is a good base.

Only ever practise these skills in your own lab or on systems you have written permission to test. Build a small lab with virtual machines so you can repeat each attack safely. The final challenge lab is a good test of whether you can join the steps together, from reconnaissance through to gaining access and reporting what you found.

About the 312-50 exam

The 312-50 exam leads to the Certified Ethical Hacker credential from EC-Council. It checks your knowledge of security threats and attack vectors, and of how to detect and prevent attacks. CEH v13 has a knowledge exam, and EC-Council also offers an optional practical exam where you solve real-world challenges in a lab.

Ethical hackers use the same tools and methods as criminals, but they work with permission and report what they find so it can be fixed. That is the mindset this course builds.

Jobs this course supports

  • Penetration Tester
  • Cybersecurity Analyst
  • SOC Analyst
  • Vulnerability Assessor
  • Red Team Operator
  • Incident Response Analyst

Skill level

Intermediate
Certification

Certified Ethical Hacker (CEH) v13
Exam code

312-50
Certification body

EC-Council
Prerequisites

Solid networking and operating system skills. EC-Council suggests about two years of IT security experience.
Best for

Security analysts, penetration testers, SOC analysts, system and network administrators
Topics covered

Reconnaissance and scanning, enumeration and vulnerability analysis, system hacking and malware, sniffing and social engineering, web apps and SQL injection, wireless and mobile, IoT, OT and cloud, cryptography
Format

Online video lessons with a challenge lab, self-paced
Language

English
Closed captions

Yes
Certificate

StemBoss Certificate of Completion

What is inside this course

21 modules and 320 lessons. Here is the full outline.

Module 1: Information Security and Ethical Hacking Overview13 lessons
  1. 1.0 Introduction to CEH v13
  2. 1.1 Elements of Security
  3. 1.2 Cyber Kill Chain
  4. 1.3 MITRE ATT&CK Framework
  5. 1.3.1 ACTIVITY - Examining MITRE ATT&CK
  6. 1.4 Hacking
  7. 1.5 Ethical Hacking
  8. 1.6 Information Assurance
  9. 1.7 Risk Management
  10. 1.8 Incident Management
  11. 1.9 Information Security Laws and Standards
  12. 1.10 Using AI in Ethical Hacking
  13. 1.11 Information Security and Ethical Hacking Review
Module 2: Footprinting and Reconnaissance18 lessons
  1. 2.1 Footprinting Concepts
  2. 2.2 OSINT Tools
  3. 2.2.1 ACTIVITY - Finding Internet-Connected Devices with Shodan
  4. 2.2.2 ACTIVITY - Performing OSINT with theHarvester
  5. 2.3 Advanced Google Search
  6. 2.3.1 ACTIVITY - Google Hacking
  7. 2.4 Whois Footprinting
  8. 2.4.1 ACTIVITY - Footprinting with WHOIS
  9. 2.5 DNS Footprinting
  10. 2.5.1 ACTIVITY - Enumerating DNS
  11. 2.6 Website Footprinting
  12. 2.7 Email Footprinting
  13. 2.8 Network Footprinting
  14. 2.8.1 ACTIVITY - Tracing a Network Path with Traceroute
  15. 2.9 Social Network Footprinting
  16. 2.10 Enhanced OSINT
  17. 2.11 Footprinting-and-Reconnaissance-Countermeasures
  18. 2.12 Footprinting and Reconnaissance Review
Module 3: Scanning Networks12 lessons
  1. 3.1 Scanning Concepts
  2. 3.2 Discovery Scans
  3. 3.3 Port Scans
  4. 3.4 Other Scan Types
  5. 3.5 Scanning Tools
  6. 3.6 NMAP
  7. 3.6.1 ACTIVITY - Port Scanning and Fingerprinting with NMAP
  8. 3.7 Firewall and IDS Evasion
  9. 3.8 Proxies
  10. 3.9 AI Enhanced SCANNING Tools
  11. 3.10 Scanning counter-measures
  12. 3.11 Scanning Networks Review
Module 4: Enumeration16 lessons
  1. 4.1 Enumeration Overview
  2. 4.2 SMB_NetBIOS_Enumeration
  3. 4.3 File Transfer Enumeration
  4. 4.4 WMI Enumeration
  5. 4.5 SNMP Enumeration
  6. 4.6 LDAP Enumeration
  7. 4.7 DNS Enumeration
  8. 4.8 SMTP Enumeration
  9. 4.8.1 ACTIVITY - SMTP Enumeration
  10. 4.9 Remote Connection Enumeration
  11. 4.10 Website Enumeration
  12. 4.10.1 ACTIVITY - Enumerating Website Directories
  13. 4.11 Local User and Active Directory Enumeration
  14. 4.12 Other Enumeration Types
  15. 4.13 Enumeration Using AI
  16. 4.14 Enumeration Countermeasures and Review
Module 5: Vulnerability Analysis5 lessons
  1. 5.1 Vulnerability Scanning
  2. 5.1.1 ACTIVITY - Vulnerability Scanning with OpenVAS
  3. 5.2 Vulnerability Assessment
  4. 5.3 AI Assisted Vulnerability Assessment
  5. 5.4 Vulnerability Analysis Review
Module 6: System Hacking43 lessons
  1. 6.1 System Hacking Concepts
  2. 6.2 Common Operating System Exploits
  3. 6.3 Buffer Overflows
  4. 6.4 System Hacking Tools and Frameworks
  5. 6.5 Metasploit
  6. 6.5.1 ACTIVITY - Hacking with Metasploit
  7. 6.6 Meterpreter
  8. 6.6.1 ACTIVITY - Having Fun with Meterpreter
  9. 6.7 Keylogging_and_Spyware-
  10. 6.8 Netcat
  11. 6.8.1 ACTIVITY - Using Netcat
  12. 6.9 Windows Exploitation
  13. 6.10 Windows Post- Exploitation
  14. 6.10.1 ACTIVITY - Windows Post Exploitation with Eternal Blue
  15. 6.10.2 ACTIVITY - Escalating Privilege with Token Passing
  16. 6.11 Linux Exploitation
  17. 6.11.1 ACTIVITY - Pwn a Linux Target from Start to Finish
  18. 6.12 Linux Post-Exploitation
  19. 6.13 Password Attacks
  20. 6.13.1 ACTIVITY - Pass-the-Hash
  21. 6.13.2 ACTIVITY - Password Spraying with Hydra
  22. 6.14 Linux Password Cracking
  23. 6.14.1 ACTIVITY - Password Cracking with Hashcat
  24. 6.14.2 ACTIVITY - Brute Forcing with Medusa
  25. 6.15 Additional Password Attacks
  26. 6.16 Attacking Network Services
  27. 6.16.1 ACTIVITY - Cracking Linux Passwords with John-the-Ripper
  28. 6.17 Other Methods for Obtaining Passwords
  29. 6.18 Network Service Attacks
  30. 6.19 Lateral Movement
  31. 6.19.1 ACTIVITY - Preparing to Pivot
  32. 6.19.2 ACTIVITY - Lateral Movement through Pivoting
  33. 6.20 Persistence
  34. 6.20.1 ACTIVITY - Creating a Persistent Netcat Back Door
  35. 6.20.2 ACTIVITY - APT Persistence
  36. 6.21 Hiding Data
  37. 6.21.1 ACTIVITY - Hiding Data with Steganography
  38. 6.22 Covering Tracks
  39. 6.22.1 ACTIVITY - Cover Tracks with Log Tampering
  40. 6.23 Side-Channel-Attacks
  41. 6.24 AI-Powered Vulnerability Exploitation Tools
  42. 6.25 System Hacking Countermeasures
  43. 6.26 System Hacking Review
Module 7: Malware Threats15 lessons
  1. 7.1 Malware Overview
  2. 7.2 Viruses
  3. 7.3 Trojans
  4. 7.4 Rootkits
  5. 7.5 Other Malware
  6. 7.6 Advanced Malware Threats
  7. 7.7 Malware Makers
  8. 7.7.1 ACTIVITY - Creating a Malware Dropper and Handler
  9. 7.8 Malware Deployment
  10. 7.9 Malware Detection
  11. 7.10 Malware Analysis
  12. 7.10.1 ACTIVITY - Analyzing the SolarWinds Orion Hack
  13. 7.11 AI and Malware
  14. 7.12 Malware Countermeasures
  15. 7.13 Malware Threats Review
Module 8: Sniffing and Spoofing11 lessons
  1. 8.1 Network Sniffing
  2. 8.2 Sniffing Tools
  3. 8.2.1 ACTIVITY - Intercepting Data with Wireshark
  4. 8.2.2 ACTIVITY - Capturing Files off the Network
  5. 8.3 MAC and ARP Attacks
  6. 8.3.1 ACTIVITY - Performing an MITM Attack with Ettercap
  7. 8.4 Name Resolution Attacks
  8. 8.4.1 ACTIVITY - Spoofing an Authentication Service with Responder
  9. 8.5 Other Layer 2 Attacks
  10. 8.6 Sniffing and Spoofing Countermeasures
  11. 8.7 Sniffing and Spoofing Review
Module 9: Social Engineering9 lessons
  1. 9.1 Social Engineering Concepts
  2. 9.2 Social Engineering Techniques
  3. 9.3 Social Engineering Tools
  4. 9.3.1 ACTIVITY - Phishing for Credentials
  5. 9.3.2 ACTIVITY - OMG Cable Baiting
  6. 9.4 Social Media, Identity Theft, Insider Threats
  7. 9.5 Social Engineering and AI
  8. 9.6 Social Engineering Countermeasures
  9. 9.7 Social Engineering Review
Module 10: Denial-of-Service11 lessons
  1. 10.1 DoS-DDoS Concepts
  2. 10.2 Volumetric Attacks
  3. 10.3 Fragmentation Attacks
  4. 10.4 State Exhaustion Attacks
  5. 10.5 Application Layer Attacks
  6. 10.5.1 ACTIVITY - Conducting a Slowloris DDoS Attack
  7. 10.6 Other Attacks
  8. 10.7 DoS Tools
  9. 10.7.1 ACTIVITY - Performing a HOIC DDoS Attack
  10. 10.8 DoS Countermeasures
  11. 10.9 DoS Review
Module 11: Session Hijacking10 lessons
  1. 11.1 Session Hijacking
  2. 11.2 Compromising a Session Token
  3. 11.3 XSS
  4. 11.3.1 ACTIVITY - Web Session Hijacking with XSS
  5. 11.4 CSRF
  6. 11.5 Other Web Hijacking Attacks
  7. 11.6 Network-Level Session Hijacking
  8. 11.7 Session Hijacking Tools
  9. 11.8 Session Hijacking Countermeasures
  10. 11.9 Session Hijacking Review
Module 1217 lessons
  1. 12.1 Types of IDS
  2. 12.2 Snort
  3. 12.3 Logging and Monitoring
  4. 12.4 IDS Considerations
  5. 12.5 IDS Evasion
  6. 12.6 Firewalls
  7. 12.7 Packet Filtering Rules
  8. 12.8 Firewall Deployments
  9. 12.9 Split DNS
  10. 12.10 Firewall Product Types
  11. 12.11 Firewall Evasion
  12. 12.11.1 ACTIVITY - Busting the DOM for WAF Evasion
  13. 12.12 NAC and Endpoint Security
  14. 12.13 NAC and EDR Evasion
  15. 12.14 Honeypots
  16. 12.15 Evasion Countermeasures
  17. 12.16 Attack Detection and Prevention Review
Module 13: Hacking Web Servers7 lessons
  1. 13.1 Web Server Operations
  2. 13.2 Hacking Web Servers
  3. 13.3 Common Web server Attacks
  4. 13.4 Webserver Attack Tools
  5. 13.5 AI and Webserver Attacks
  6. 13.6 Hacking Web Servers Countermeasures
  7. 13.7 Hacking Web Servers Review
Module 14: Hacking Web Applications39 lessons
  1. 14.1 Web Application Concepts
  2. 14.2 Attacking Web Apps
  3. 14.3 A01 Broken Access Control
  4. 14.4 A02 Cryptographic Failures
  5. 14.5 A03 Injection
  6. 14.5.1 ACTIVITY - Command Injection
  7. 14.6 A04 Insecure Design
  8. 14.7 A05 Security Misconfiguration
  9. 14.8 A06 Vulnerable and Outdated Components
  10. 14.9 A07 Identification and Authentication Failures
  11. 14.10 A08 Software and Data integrity Failures
  12. 14.11 A09 Security Logging and Monitoring Failures
  13. 14.12 A10 Server-Side Request Forgery
  14. 14.13 XSS Attacks
  15. 14.14 CSRF
  16. 14.15 Parameter Tampering
  17. 14.15.1 ACTIVITY - Parameter Tampering with Burp Suite
  18. 14.16 Clickjacking
  19. 14.16.1 ACTIVITY - Clickjacking with XSS and iFrame Injection
  20. 14.17 SQL Injection
  21. 14.17.1 ACTIVITY - Using SQL Injection to Steal Sensitive Data
  22. 14.18 Insecure Deserialization Attacks
  23. 14.19 IDOR
  24. 14.19.1 ACTIVITY - IDOR Abuse with Burp Suite
  25. 14.20 Directory Traversal
  26. 14.20.1 ACTIVITY - Directory Traversal
  27. 14.21 Session Management Attacks
  28. 14.22 Response Splitting
  29. 14.23 Overflow Attacks
  30. 14.24 XXE Attacks
  31. 14.25 Web App DoS
  32. 14.26 Soap Attacks
  33. 14.27 AJAX Attacks
  34. 14.28 Web API Hacking
  35. 14.29 Webhooks and Web Shells
  36. 14.30 Web App Hacking Tools
  37. 14.31 AI and Web Application Attacks
  38. 14.32 Hacking Web Applications Countermeasures
  39. 14.33 Hacking Web Applications Review
Module 15: SQL Injection13 lessons
  1. 15.1 SQL Injection Overview
  2. 15.2 Basic SQL Injection
  3. 15.3 Finding Vulnerable Websites
  4. 15.4 Error-based SQL Injection
  5. 15.5 Union SQL Injection
  6. 15.5.1 ACTIVITY - SQLi on a Live Website - Part 1
  7. 15.5.2 ACTIVITY - SQLi on a Live Website - Part 2
  8. 15.6 Blind SQL Injection
  9. 15.7 SQL Injection Tools
  10. 15.8 Evading Detection
  11. 15.9 Analyzing SQL Injection
  12. 15.10 SQL Injection Countermeasures
  13. 15.11 SQL Injection Review
Module 16: Hacking Wireless Networks14 lessons
  1. 16.1 Wireless Concepts
  2. 16.2 Wireless Security Standards
  3. 16.3 WI-FI Discovery Tools
  4. 16.4 Common Wi-Fi Attacks
  5. 16.5 Wi-Fi Password Cracking
  6. 16.6 WEP Cracking
  7. 16.7 WPA,WPA2,WPA3 Cracking
  8. 16.7.1 ACTIVITY - WPA2 KRACK Attack
  9. 16.8 WPS Cracking
  10. 16.9 Bluetooth Hacking
  11. 16.10 Other Wireless Hacking
  12. 16.11 Wireless Security Tools
  13. 16.12 Wireless Hacking Countermeasures
  14. 16.13 Hacking Wireless Networks Review
Module 17: Hacking Mobile Platforms18 lessons
  1. 17.1 Mobile Platform Overview
  2. 17.2 Mobile Device Attacks
  3. 17.3 Android Overview
  4. 17.4 Rooting Android
  5. 17.5 Android Exploits
  6. 17.5.1 ACTIVITY - Pwn a Mobile Device
  7. 17.6 Android-based Hacking Tools
  8. 17.7 Reverse Engineering an Android App
  9. 17.8 Securing Android
  10. 17.9 iOS Overview
  11. 17.10 Jailbreaking iOS
  12. 17.11 IOS Exploits
  13. 17.12 iOS-based Hacking Tools
  14. 17.13 Reverse Engineering an iOS App
  15. 17.14 Securing iOS
  16. 17.15 Mobile Device Management
  17. 17.16 Hacking Mobile Platforms Countermeasures
  18. 17.17 Hacking Mobile Platforms Review
Module 18: IoT Hacking and OT Hacking13 lessons
  1. 18.1 IoT Overview
  2. 18.2 IoT Infrastructure
  3. 18.3 IoT Vulnerabilities and Threats
  4. 18.4 IoT Hacking Methodology and Tools
  5. 18.4.1 ACTIVITY - Card Cloning with Flipper Zero
  6. 18.5 IoT Hacking Countermeasures
  7. 18.6 OT Concepts
  8. 18.7 IT-OT Convergence
  9. 18.8 OT Components
  10. 18.9 OT Vulnerabilities
  11. 18.10 OT Attack Methodology and Tools
  12. 18.11 OT Hacking Countermeasures
  13. 18.12 IoT and OT Hacking Review
Module 19: Cloud Computing11 lessons
  1. 19.1 Cloud Computing Concepts
  2. 19.2 Cloud Types
  3. 19.3 Cloud Benefits and Considerations
  4. 19.4 Cloud Risks and Vulnerabilities
  5. 19.5 AWS Hacking
  6. 19.5.1 ACTIVITY - AWS S3 Bucket Hacking
  7. 19.6 Azure Cloud Hacking
  8. 19.7 Google Cloud Hacking
  9. 19.8 Container Hacking
  10. 19.9 Cloud Threat Countermeasures
  11. 19.10 Cloud Computing Review
Module 20: Cryptography16 lessons
  1. 20.1 Cryptography Concepts
  2. 20.2 Symmetric Encryption
  3. 20.2.1 ACTIVITY - Symmetric Encryption
  4. 20.3 Asymmetric Encryption
  5. 20.3.1 ACTIVITY - Asymmetric Encryption
  6. 20.4 Public Key Exchange
  7. 20.5 PKI
  8. 20.5.1 ACTIVITY - Generating and Using an Asymmetric Key Pair
  9. 20.6 Digital Signatures
  10. 20.7 Hashing
  11. 20.7.1 ACTIVITY - Calculating Hashes
  12. 20.8 Common Encryption Use Cases
  13. 20.9 Cryptography Tools
  14. 20.10 Cryptography Attacks
  15. 20.11 Cryptography Review
  16. 20.12 Course Conclusion
Module 21: Challenge Lab9 lessons
  1. 21.1-ACTIVITY-Challenge-Lab-Introduction
  2. 21.2-ACTIVITY-Flag 1 - Port Authority, Please!
  3. 21.3-ACTIVITY-Flag 2 - Moo-ve Fast and Break Things
  4. 21.4-ACTIVITY-Flag 3 - Pixels, Packets & Patient X
  5. 21.5-ACTIVITY-Flag 4 - Hexes and Hashes
  6. 21.6-ACTIVITY-Flag 5 - APT & the PowerShell Symphony
  7. 21.7-ACTIVITY-Flag 6 - Script Kiddie's Revenge
  8. 21.8-ACTIVITY-Flag 7 - Oh Mannie, You Shouldn't Have!
  9. 21.9-ACTIVITY-Report

Your learning path

Where Certified Ethical Hacker (CEH) v13 fits. Build your skills one step at a time.

Take firstCompTIA Network+ N10-009 Certification Training
You are hereCertified Ethical Hacker (CEH) v13
Next stepCHFI Course - Computer Hacking Forensics Investigator (ECC 312-49)

Frequently asked questions

What is new in CEH v13?

CEH v13 adds AI-assisted tools and techniques to the classic ethical hacking topics, alongside up-to-date coverage of cloud, IoT and OT attacks.

Which tools will I see in the CEH v13 course?

The lessons use well-known tools such as Nmap for scanning, OpenVAS for vulnerability checks, Metasploit for exploitation and Hashcat for password cracking.

Is ethical hacking legal?

Yes, when you have written permission from the system owner. CEH teaches attack methods so you can test and protect systems you are allowed to test.

Is there a practical part to the CEH v13 certification?

Yes. EC-Council offers an optional practical exam with real-world challenges, in addition to the knowledge exam. The course ends with a challenge lab to help you practise.

Should I take Security+ before CEH?

It is a good idea. Security+ gives you the core security terms and ideas that CEH builds on.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$599.00
Buy course