EC-Council Certified Ethical Hacker (CEH)

Price
Net
VAT

Price
Price on Request

Duration
5 days

For companies and job seekers:
this course is 100% fundable!
 

Location

Course Language
English

Training Solutions
Online Live

Digital systems are under attack every day, making modern security expertise a crucial factor in IT environments. This training course provides an up-to-date understanding of offensive security methods for identifying vulnerabilities at an early stage and assessing risks in a well-founded manner.

Key topics

  • Attack techniques, tools, and current threat scenarios.
  • Vulnerability analysis, penetration testing, and exploit methods.
  • Network security, cloud and web applications.
  • AI-supported attack patterns and modern defense strategies.
  • Legal and ethical framework conditions for IT security.

Prerequisite
Basic knowledge of networks, operating systems, and IT security.

Target audience
IT security professionals, administrators, system and network managers.

Strengthens analytical thinking, security awareness, and technical depth for a professional role in an increasingly automated and networked IT landscape.

Print as PDF
Course content
  • Fundamentals of Information Security
  • Cyber kill chain
  • Hacking Methods
  • Ethical hacking
  • Security Measures
  • Laws and standards
  • Footprinting with search engines
  • Footprinting with web services
  • Footprinting in social networks
  • Website footprinting
  • Email footprinting
  • Whois footprinting
  • DNS footprinting
  • Network footprinting
  • Footprinting with social engineering
  • Tools for footprinting
  • Protection against footprinting
  • Tools for scanning networks
  • Finding devices on the network
  • Checking open ports and active services
  • Detecting a device's operating system
  • Scanning despite security measures such as firewalls
  • Creating network overviews
  • NetBIOS enumeration
  • SNMP enumeration
  • LDAP enumeration
  • NTP and NFS enumeration
  • SMTP and DNS enumeration
  • Other enumeration techniques
  • Countermeasures to enumeration
  • Vulnerability assessment: Different approaches and methods
  • Classification of vulnerabilities
  • Get access
  • Increase privileges
  • Maintain access
  • Delete logs
  • Concepts for malware
  • APT strategies
  • Trojan strategies
  • Concepts for viruses and worms
  • Strategies for fileless malware
  • Analysis of malware
  • Defensive measures
  • Software for combating malware
  • Sniffing techniques: Attacks on MAC addresses
  • Sniffing techniques: Attacks on DHCP
  • Sniffing technique: ARP poisoning
  • Sniffing technique: Spoofing attacks
  • Sniffing technique: DNS poisoning
  • Sniffing tools
  • Protective measures
  • Detection of sniffing attacks
  • Concepts of social engineering
  • Techniques in social engineering
  • Threats from insiders
  • Identity theft on social networks
  • Identity theft
  • Protective measures
  • Concepts related to DoS/DDoS
  • Techniques used in DoS/DDoS attacks
  • Botnets and DDoS case study
  • Tools for DoS/DDoS attacks
  • Defense measures
  • Protection tools against DoS/DDoS attacks
  • Concepts of session hijacking
  • Session hijacking at the application level
  • Session hijacking at the network level
  • Tools for session hijacking
  • Prevention measures
  • Concepts for IDS, IPS, firewalls, and honeypots
  • Solutions for IDS, IPS, firewalls, and honeypots
  • Methods for circumventing IDS
  • Techniques for bypassing firewalls
  • Tools for bypassing IDS and firewalls
  • Detection of honeypots
  • Measures against circumventing IDS and firewalls
  • Web server concepts
  • Attacks on web servers
  • Procedure for web server attacks
  • Tools for web server attacks
  • Protective measures against attacks
  • Management of security updates
  • Security tools for web servers
  • Ideas for web applications
  • Dangers of web applications
  • How to hack web applications
  • Web API, webhooks, and web shell
  • Protective measures for web applications
  • SQL injection: explanation and basics
  • Different types of SQL injection
  • Procedure and approach for SQL injections
  • Tools for performing SQL injections
  • Methods for circumventing security measures
  • Protective measures against SQL injections
  • Wireless technology concepts
  • Encryption in the wireless domain
  • Threats in wireless networks
  • Wireless hacking methods
  • Wireless hacking tools
  • Hacking Bluetooth connections
  • Protective measures against wireless attacks
  • Security tools for wireless networks
  • Attack risks on mobile platforms
  • Security vulnerabilities in the Android operating system
  • Security vulnerabilities in the iOS operating system
  • Management of mobile devices
  • Security policies and tools for mobile devices
  • Hacking in the Internet of Things (IoT)
  • Concepts in the field of the Internet of Things
  • Attacks in the Internet of Things
  • Procedure for hacking IoT
  • Tools for IoT hacking
  • Protective measures
  • Hacking in operational technology (OT)
  • Concepts in operational technology
  • Attacks in operational technology
  • Procedure for hacking OT
  • Tools for OT hacking
  • Protective measures
  • Cloud computing concepts
  • Use of container technology
  • Serverless computing
  • Risks associated with cloud computing
  • Hacking in the cloud
  • Security aspects in the cloud
  • Concepts of cryptography
  • Encryption algorithms
  • Cryptography tools
  • Public key infrastructure (PKI)
  • Encryption of emails
  • Hard disk encryption
  • Analysis of encryption (cryptanalysis)
  • Protective measures against attacks

Frequently asked questions

  • The CEH is an internationally recognized certification for ethical hacking. It teaches how to legally test IT systems and identify security vulnerabilities.
  • CEH is suitable for those interested in IT security, administrators, analysts, and anyone who wants to protect systems and understand attacks.
  • Basic knowledge of IT, networks, and operating systems is helpful. Professional experience in the IT field is recommended but not essential.
  • Yes, CEH is recognized worldwide and valued by companies, government agencies, and security organizations.
  • CEH teaches only legal and ethical hacking. The goal is protection, prevention, and improvement of IT security.
  • CEH certification is valid for three years and can be renewed through continuing education and credits.
  • CEH opens up opportunities in IT security, penetration testing, cyber defense, security consulting, and compliance areas.

Do you have any further questions? Please contact us.