Skip to main content

Certified Ethical Hacker Training for Certification – CEH V12

Intermediate56 Hours322 Course Videos220 Test Questions

$249.00

CEH v12 training for the EC-Council Certified Ethical Hacker exam (312-50). It follows all 20 CEH modules over 56 hours and 322 videos, for IT staff moving into security.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Certified Ethical Hacker Training for Certification, CEH v12, teaches you to think like an attacker so you can find weak spots before criminals do. It follows the 20 modules of the EC-Council CEH v12 programme and prepares you for the 312-50 exam. It suits IT staff, security officers, auditors and anyone moving into cybersecurity. You get 56 hours of training across 322 videos, plus 220 test questions.

What you will learn

  • The ethical hacking process, from research to reporting
  • How to gather facts about a target with footprinting and reconnaissance
  • How to scan networks and list users, shares and services
  • How to find and rank vulnerabilities
  • How attackers break into systems and how to stop them
  • How malware, sniffing and social engineering attacks work
  • How to test web servers and web apps, including SQL injection
  • How attackers target wireless, mobile, IoT and cloud systems
  • How attackers try to slip past IDS, firewalls and honeypots
  • The basics of cryptography and how it protects data

Course outline

  1. Introduction to Ethical Hacking: key terms, laws and methods.
  2. Footprinting and Reconnaissance: gathering open information.
  3. Scanning Networks: finding live hosts, ports and services.
  4. Enumeration: pulling out users, groups and shares.
  5. Vulnerability Analysis: finding and ranking weak spots.
  6. System Hacking: gaining and keeping access.
  7. Malware Threats: viruses, worms, trojans and more.
  8. Sniffing: capturing traffic on a network.
  9. Social Engineering: tricking people into giving access.
  10. Denial-of-Service: how DoS and DDoS attacks work.
  11. Session Hijacking: taking over live sessions.
  12. Evading IDS, Firewalls and Honeypots: getting past defences.
  13. Hacking Web Servers: attacks on server software.
  14. Hacking Web Applications: common web app flaws.
  15. SQL Injection: attacking databases through web forms.
  16. Hacking Wireless Networks: Wi-Fi attacks and defences.
  17. Hacking Mobile Platforms: Android and iOS threats.
  18. IoT and OT Hacking: smart devices and industrial systems.
  19. Cloud Computing: cloud threats and controls.
  20. Cryptography: encryption, hashing and keys.

Who this course is for

  • IT professionals who want to move into cybersecurity
  • Security officers and auditors
  • Penetration testers who want a formal grounding
  • Network and infrastructure staff who protect systems
  • Anyone preparing for the EC-Council CEH exam

Before you start

The course is open to newcomers, but you will find it easier if you already know how networks, operating systems and basic security work. You must be over 18 to take this training. EC-Council has its own rules for who can sit the exam, either through official training or proven security work experience, so check these on eccouncil.org.

About the 312-50 exam

The 312-50 exam is set by EC-Council and leads to the Certified Ethical Hacker (CEH) credential. It tests your grasp of security threats and attack methods, and how to detect and prevent them. This course follows CEH v12. EC-Council has since released CEH v13, so check which version is live before you book.

Jobs this course supports

  • Ethical hacker
  • Penetration tester
  • Information security analyst
  • Cybersecurity consultant
  • Network security engineer
  • IT security administrator
  • Security auditor

Skill level

Intermediate
Duration

56 Hours
Videos

322 Course Videos
Questions

220 Test Questions
Certification

Certified Ethical Hacker (CEH) v12
Exam code

312-50
Certification body

EC-Council
Prerequisites

Basic networking and IT knowledge helps. EC-Council sets its own exam entry rules.
Best for

Penetration testers, security analysts, security officers, auditors, network security engineers
Topics covered

Reconnaissance, scanning, system hacking, malware, social engineering, web app hacking, wireless and mobile, cloud and cryptography
Format

Online video lessons, self-paced
Language

English
Closed captions

Yes
Certificate

StemBoss Certificate of Completion

What is inside this course

20 modules and 323 lessons. Here is the full outline.

Module 1 - Introduction To Ethical Hacking12 lessons
  1. 1.0 Introduction to CEH v12
  2. 1.1 Elements of Security
  3. 1.2 Cyber Kill Chain
  4. 1.3 MITRE ATT&CK Framework
  5. 1.3.1 Activity - Researching the MITRE ATTACK Framework
  6. 1.4 Hacking
  7. 1.5 Ethical Hacking
  8. 1.6 Information Assurance
  9. 1.7 Risk Management
  10. 1.8 Incident Management
  11. 1.9 Information Security Laws and Standards
  12. 1.10 Introduction to Ethical Hacking Review
Module 2: Footprinting and Reconnaissance23 lessons
  1. 2.1 Footprinting Concepts
  2. 2.2 OSINT Tools
  3. 2.2.1 Activity - Conduct OSINT with OSR Framework
  4. 2.2.2 Activity - OSINT with theHarvester
  5. 2.2.3 Activity - Add API Keys to theHarvester
  6. 2.2.4 Activity - Extract Document Metadata with FOCA
  7. 2.2.5 Activity - Extract Document Metadata with FOCA
  8. 2.3 Advanced Google Search
  9. 2.3.1 Activity - Google Hacking
  10. 2.4 Whois Footprinting
  11. 2.4.1 Activity - Conducting Whois Research
  12. 2.5 DNS Footprinting
  13. 2.5.1 Activity - Query DNS with NSLOOKUP
  14. 2.6 Website Footprinting
  15. 2.6.1 Activity - Fingerprint a Webserver with ID Serve
  16. 2.6.2 Activity - Extract Data from Websites
  17. 2.6.3 Activity - Mirror a Website with HTTrack
  18. 2.7 Email Footprinting
  19. 2.7.1 Activity - Trace a Suspicious Email
  20. 2.8 Network Footprinting
  21. 2.9 Social Network Footprinting
  22. 2.10 Footprinting and Reconnaissance Countermeasures
  23. 2.11 Footprinting and Reconnaissance Review
Module 3: Scanning Networks22 lessons
  1. 3.1 Scanning Concepts
  2. 3.2 Discovery Scans
  3. 3.2.1 Activity - ICMP ECHO and ARP Pings
  4. 3.2.2 Activity - Host Discovery with Angry IP Scanner
  5. 3.3 Port Scans
  6. 3.3.1 Activity - Port Scan with Angry IP Scanner
  7. 3.4 Other Scan Types
  8. 3.5 Scanning Tools
  9. 3.5.1 Activity - Hping3 Packet Crafting
  10. 3.5.2 Activity - Fingerprinting with Zenmap
  11. 3.6 NMAP
  12. 3.6.1 Activity - Nmap Basic Scans
  13. 3.6.2 Activity - Host Discovery with Nmap
  14. 3.6.3 - Activity - Nmap Version Detection
  15. 3.6.4 Activity - Nmap Idle (Zombie) Scan
  16. 3.6.5 Activity - Nmap FTP Bounce Scan
  17. 3.6.6 - Activity - NMAP Scripts
  18. 3.7 Firewall and IDS Evasion
  19. 3.7.1 Activity - Nmap Advanced Scans
  20. 3.8 Proxies
  21. 3.9 Scanning Countermeasures
  22. 3.10 Scanning Networks Review
Module 4: Enumeration17 lessons
  1. 4.1 Enumeration Overview
  2. 4.2 SMB_NetBIOS_Enumeration
  3. 4.2.1 Activity - Enumerate NetBIOS Information with Hyena
  4. 4.3 File Transfer Enumeration
  5. 4.4 WMI Enumeration
  6. 4.4.1 - Activity - Enumerating WMI with Hyena
  7. 4.5 SNMP Enumeration
  8. 4.5.1 Activity - Enumerate WMI, SNMP and Other Information Using SoftPerfect
  9. 4.6 LDAP Enumeration
  10. 4.7 DNS Enumeration
  11. 4.8 SMTP Enumeration
  12. 4.8.1 Activity - Enumerate Email Users with SMTP
  13. 4.9 Remote Connection Enumeration
  14. 4.10 Website Enumeration
  15. 4.10.1 Activity - Enumerate a Website with DirBuster
  16. 4.11 Other Enumeration Types
  17. 4.12 Enumeration Countermeasures and Review
Module 5: Vulnerability Analysis4 lessons
  1. 5.1 Vulnerability Scanning
  2. 5.1.1 Vulnerability Scanning with OpenVAS
  3. 5.2 Vulnerability Assessment
  4. 5.3 Vulnerability Analysis Review
Module 6: System Hacking39 lessons
  1. 6.1 System Hacking Concepts
  2. 6.2 Common OS Exploits
  3. 6.3 Buffer Overflows
  4. 6.3.1 Activity - Performing a Buffer Overflow
  5. 6.4 System Hacking Tools and Frameworks
  6. 6.4.1 Activity - Hack a Linux Target from Start to Finish
  7. 6.5 Metasploit
  8. 6.5.1 Activity - Get Started with Metasploit
  9. 6.6 Meterpreter
  10. 6.7 Keylogging and Spyware
  11. 6.7.1 Activity - Keylogging with Meterpreter
  12. 6.8 Netcat
  13. 6.8.1 Activity - Using Netcat
  14. 6.9 Hacking Windows
  15. 6.9.1 Activity - Hacking Windows with Eternal Blue
  16. 6.10 Hacking Linux
  17. 6.11 Password Attacks
  18. 6.11.1 Activity - Pass the Hash
  19. 6.11.2 Activity - Password Spraying
  20. 6.12 Password Cracking Tools
  21. 6.13 Windows Password Cracking
  22. 6.13.1 Activity - Cracking Windows Passwords
  23. 6.13.2 Activity - Cracking Password Hashes with Hashcat
  24. 6.14 Linux Password Cracking
  25. 6.15 Other Methods for Obtaining Passwords
  26. 6.16 Network Service Attacks
  27. 6.16.1 Activity - Brute Forcing a Network Service with Medusa
  28. 6.17 Post Exploitation
  29. 6.18 Pivoting
  30. 6.18.1 & 6.18.2 Activity - Pivoting Setup and Attack
  31. 6.19 Maintaining Access
  32. 6.19.1 Activity - Persistence
  33. 6.20 Hiding Data
  34. 6.20.1 Activity - Hiding Data Using Least Significant Bit Steganography
  35. 6.21 Covering Tracks
  36. 6.21.1 Activity - Clearing Tracks in Windows
  37. 6.21.2 Activity - View and Clear Audit Policies with Auditpol
  38. 6.22 System Hacking Countermeasures
  39. 6.23 System Hacking Review
Module 7: Malware Threats15 lessons
  1. 7.1 Malware Overview
  2. 7.2 Viruses
  3. 7.3 Trojans
  4. 7.3.1 Activity - Deploying a RAT
  5. 7.4 Rootkits
  6. 7.5 Other Malware
  7. 7.6 Advanced Persistent Threat
  8. 7.7 Malware Makers
  9. 7.7.1 Activity - Creating a Malware Dropper and Handler
  10. 7.8 Malware Detection
  11. 7.9 Malware Analysis
  12. 7.9.1 Activity - Performing a Static Code Review
  13. 7.9.2 Activity - Analyzing the SolarWinds Orion Hack
  14. 7.10 Malware Countermeasures
  15. 7.11 Malware Threats Review
Module 8: Sniffing11 lessons
  1. 8.1 Network Sniffing
  2. 8.2 Sniffing Tools
  3. 8.2.1 Activity- Sniffing HTTP with Wireshark
  4. 8.2.2 Activity - Capturing Files from SMB
  5. 8.3 ARP and MAC Attacks
  6. 8.3.1 Activity - Performing an MITM Attack with Ettercap
  7. 8.4 Name Resolution Attacks
  8. 8.4.1 Activity - Spoofing Responses with Responder
  9. 8.5 Other Layer 2 Attacks
  10. 8.6 Sniffing Countermeasures
  11. 8.7 Sniffing Review
Module 9: Social Engineering9 lessons
  1. 9.1 Social Engineering Concepts
  2. 9.2 Social Engineering Techniques
  3. 9.2.1 Activity - Deploying a Baited USB Stick
  4. 9.2.2 Activity - Using an O.MG Lightning Cable
  5. 9.3 Social Engineering Tools
  6. 9.3.1 Activity - Phishing for Credentials
  7. 9.4 Social Media, Identity Theft, Insider Threats
  8. 9.5 Social Engineering Countermeasures
  9. 9.6 Social Engineering Review
Module 10: Denial-of-Service12 lessons
  1. 10.1 DoS-DDoS Concepts
  2. 10.2 Volumetric Attacks
  3. 10.3 Fragmentation Attacks
  4. 10.4 State Exhaustion Attacks
  5. 10.5 Application Layer Attacks
  6. 10.5.1 Activity - Performing a LOIC Attack
  7. 10.5.2 Activity - Performing a HOIC Attack
  8. 10.5.3 Activity - Conducting a Slowloris Attack
  9. 10.6 Other Attacks
  10. 10.7 DoS Tools
  11. 10.8 DoS Countermeasures
  12. 10.9 DoS Review
Module 11: Session Hijacking10 lessons
  1. 11.1 Session Hijacking
  2. 11.2 Compromising a Session Token
  3. 11.3 XSS
  4. 11.4 CSRF
  5. 11.5 Other Web Hijacking Attacks
  6. 11.6 Network-Level Session Hijacking
  7. 11.6.1 Activity - Hijack a Telnet Session
  8. 11.7 Session Hijacking Tools
  9. 11.8 Session Hijacking Countermeasures
  10. 11.9 Session Hijacking Review
Module 12: Evading IDS, Firewalls, and Honeypots18 lessons
  1. 12.1 Types of IDS
  2. 12.2 Snort
  3. 12.3 System Logs
  4. 12.4 IDS Considerations
  5. 12.5 IDS Evasion
  6. 12.5.1 Activity - Fly Below IDS Radar
  7. 12.6 Firewalls
  8. 12.7 Packet Filtering Rules
  9. 12.8 Firewall Deployments
  10. 12.9 Split DNS
  11. 12.10 Firewall Product Types
  12. 12.11 Firewall Evasion
  13. 12.11.1 Activity - Use Social Engineering to Bypass a Windows Firewall
  14. 12.11.2 Activity - Busting the DOM for WAF Evasion
  15. 12.12 Honeypots
  16. 12.13 Honeypot Detection and Evasion
  17. 12.13.1 Activity - Test and Analyze a Honey Pot
  18. 12.14 Evading IDS, Firewalls, and Honeypots Review
Module 13: Hacking Web Servers7 lessons
  1. 13.1 Web Server Operations
  2. 13.2 Hacking Web Servers
  3. 13.3 Common Web Server Attacks
  4. 13.3.1 Activity - Defacing a Website
  5. 13.4 Web Server Attack Tools
  6. 13.5 Hacking Web Servers Countermeasures
  7. 13.6 Hacking Web Servers Review
Module 14: Hacking Web Applications37 lessons
  1. 14.1 Web Application Concepts
  2. 14.2 Attacking Web Apps
  3. 14.3 A01 Broken Access Control
  4. 14.4 A02 Cryptographic Failures
  5. 14.5 A03 Injection
  6. 14.5.1 Activity - Command Injection
  7. 14.6 A04 Insecure Design
  8. 14.7 A05 Security Misconfiguration
  9. 14.8 A06 Vulnerable and Outdated Components
  10. 14.9 A07 Identification and Authentication Failures
  11. 14.10 A08 Software and Data integrity Failures
  12. 14.11 A09 Security Logging and Monitoring Failures
  13. 14.12 A10 Server-Side Request Forgery
  14. 14.13 XSS Attacks
  15. 14.13.1 Activity - XSS Walkthrough
  16. 14.13.2 Activity - Inject a Malicious iFrame with XXS
  17. 14.14 CSRF
  18. 14.15 Parameter Tampering
  19. 14.15.1 Activity - Parameter Tampering with Burp
  20. 14.16 Clickjacking
  21. 14.17 SQL Injection
  22. 14.18 Insecure Deserialization Attacks
  23. 14.19 IDOR
  24. 14.19.1 Activity - Hacking with IDOR
  25. 14.20 Directory Traversal
  26. 14.21 Session Management Attacks
  27. 14.22 Response Splitting
  28. 14.23 Overflow Attacks
  29. 14.24 XXE Attacks
  30. 14.25 Web App DoS
  31. 14.26 Soap Attacks
  32. 14.27 AJAX Attacks
  33. 14.28 Web API Hacking
  34. 14.29 Webhooks and Web Shells
  35. 14.30 Web App Hacking Tools
  36. 14.31 Hacking Web Applications Countermeasures
  37. 14.32 Hacking Web Applications Review
Module 15: SQL Injection14 lessons
  1. 15.1 SQL Injection Overview
  2. 15.2 Basic SQL Injection
  3. 15.3 Finding Vulnerable Websites
  4. 15.4 Error-based SQL Injection
  5. 15.5 Union SQL Injection
  6. 15.5.1 Activity - Testing SQLi on a Live Website - Part 1
  7. 15.5.2 Activity - Testing SQLi on a Live Website - Part 2
  8. 15.6 Blind SQL Injection
  9. 15.7 SQL Injection Tools
  10. 15.7.1 Activity - SQL Injection Using SQLmap
  11. 15.8 Evading Detection
  12. 15.9 Analyzing SQL Injection
  13. 15.10 SQL Injection Countermeasures
  14. 15.11 SQL Injection Review
Module 16: Hacking Wireless Networks17 lessons
  1. 16.1 Wireless Concepts
  2. 16.2 Wireless Security Standards
  3. 16.3 WI-FI Discovery Tools
  4. 16.4 Common Wi-Fi Attacks
  5. 16.5 Wi-Fi Password Cracking
  6. 16.6 WEP Cracking
  7. 16.6.1 Activity - Cracking WEP
  8. 16.7 WPA,WPA2,WPA3 Cracking
  9. 16.7.1 Activity - WPA KRACK Attack
  10. 16.8 WPS Cracking
  11. 16.9 Bluetooth Hacking
  12. 16.10 Other Wireless Hacking
  13. 16.10.1 Activity - Cloning an RFID badge
  14. 16.10.2 Activity - Hacking with a Flipper Zero
  15. 16.11 Wireless Security Tools
  16. 16.12 Wireless Hacking Countermeasures
  17. 16.13 Hacking Wireless Networks Review
Module 17: Hacking Mobile Platforms19 lessons
  1. 17.1 Mobile Device Overview
  2. 17.2 Mobile Device Attacks
  3. 17.3 Android Vulnerabilities
  4. 17.4 Rooting Android
  5. 17.5 Android Exploits
  6. 17.5.1 Activity - Hacking Android
  7. 17.5.2 Activity - Using a Mobile Device in a DDoS Campaign
  8. 17.6 Android-based Hacking Tools
  9. 17.7 Reverse Engineering an Android App
  10. 17.8 Securing Android
  11. 17.9 iOS Overview
  12. 17.10 Jailbreaking iOS
  13. 17.11 iOS Exploits
  14. 17.12 iOS-based Hacking Tools
  15. 17.13 Reverse Engineering an iOS App
  16. 17.14 Securing iOS
  17. 17.15 Mobile Device Management
  18. 17.16 Hacking Mobile Platforms Countermeasures
  19. 17.17 Hacking Mobile Platforms Review
Module 18: IoT AND OT Hacking13 lessons
  1. 18.1 IoT Overview
  2. 18.2 IoT Infrastructure
  3. 18.3 IoT Vulnerabilities and Threats
  4. 18.3.1 Activity - Searching for Vulnerable IoT Devices
  5. 18.4 IoT Hacking Methodology and Tools
  6. 18.5 IoT Hacking Countermeasures
  7. 18.6 OT Concepts
  8. 18.7 IT-OT Convergence
  9. 18.8 OT Components
  10. 18.9 OT Vulnerabilities
  11. 18.10 OT Attack Methodology and Tools
  12. 18.11 OT Hacking Countermeasures
  13. 18.12 IoT and OT Hacking Review
Module 19: Cloud Computing8 lessons
  1. 19.1 Cloud Computing Concepts
  2. 19.2 Cloud Types
  3. 19.3 Cloud Benefits and Considerations
  4. 19.4 Cloud Risks and Vulnerabilities
  5. 19.5 Cloud Threats and Countermeasures
  6. 19.5.1 Activity - Hacking S3 Buckets
  7. 19.6 Cloud Security Tools And Best Practices
  8. 19.7 Cloud Computing Review
Module 20: Cryptography16 lessons
  1. 20.1 Cryptography Concepts
  2. 20.2 Symmetric Encryption
  3. 20.2.1 Activity - Symmetric Encryption
  4. 20.3 Asymmetric Encryption
  5. 20.3.1 Activity - Asymmetric Encryption
  6. 20.4 Public Key Exchange
  7. 20.5 PKI
  8. 20.5.1 Activity - Generating and Using an Asymmetric Key Pair
  9. 20.6 Digital Signatures
  10. 20.7 Hashing
  11. 20.7.1 Activity - Calculating Hashes
  12. 20.8 Common Cryptography Use Cases
  13. 20.9 Cryptography Tools
  14. 20.10 Cryptography Attacks
  15. 20.11 Cryptography Review
  16. 20.12 Course Conclusion

Your learning path

Where Certified Ethical Hacker Training for Certification - CEH V12 fits. Build your skills one step at a time.

You are hereCertified Ethical Hacker Training for Certification - CEH V12
Next stepCHFI Course - Computer Hacking Forensics Investigator (ECC 312-49)

Frequently asked questions

How many modules does this CEH v12 course cover?

It covers all 20 CEH v12 modules, from Introduction to Ethical Hacking through to Cryptography.

What is the exam code for the Certified Ethical Hacker exam?

The CEH exam code is 312-50, and the exam is set by EC-Council.

Is this course still useful now that CEH v13 is out?

Yes. The core attack methods and defences in v12 still apply. Check which exam version EC-Council has live before you book.

Do I need to be a security expert to start?

No. The course is open to newcomers, but a basic grasp of networks and operating systems will help a lot.

How long is this CEH course?

It runs for 56 hours across 322 videos and includes 220 test questions.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$249.00
Buy course