CERTIFIED ETHICAL HACKERv11 - CRAW Security

CERTIFIED ETHICAL HACKERv11Demanded by Employers. Respected by Peers.CERTIFIED ETHICAL HACKER01

Who is a Certified Ethical Hacker?A Certified Ethical Hacker is a specialist typically working in a red team environment, focusedon attacking computer systems and gaining access to networks, applications, databases, andother critical data on secured systems. A CEH understands attack strategies, the use of creativeattack vectors, and mimics the skillsand creativity of malicious hackers. Unlike malicious hackersand actors, Certified Ethical Hackers operate with permission from the system owners and takeall precautions to ensure the outcomes remain confidential. Bug bounty researchers are expertethical hackers who use their attack skills to uncover vulnerabilities in the systems.Course DescriptionThe Certified Ethical Hacker (CEH) credential is the most trusted ethical hacking certificationand accomplishment recommended by employers globally. It is the most desired informationsecurity certification and represents one of the fastest-growing cyber credentials required bycritical infrastructure and essential service providers. Since the introduction of CEH in 2003, it isrecognized as a standard within the information security community. CEH v11 continues tointroduce the latest hacking techniques and the most advanced hacking tools and exploits usedby hackers and information security professionals today. The Five Phases of Ethical Hacking andthe original core mission of CEH remain valid and relevant today: “To beat a hacker, you need tothink like a hacker.”CERTIFIED ETHICALHACKER02

Certified Ethical Hacker (CEH) Version 11CEH provides an in-depth understanding of ethical hacking phases, various attack vectors, andpreventative countermeasures. It will teach you how hackers think and act maliciously so thatyou will be better positioned to set up your security infrastructure and defend future attacks.Understanding system weaknesses and vulnerabilities help organizations strengthen theirsystem security controls to minimize the risk of an incident.CEH was built to incorporate a hands-on environment and systematic process across everyethical hacking domain and methodology, giving you the opportunity to work towards provingthe required knowledge and skills needed to perform the job of an ethical hacker. You will beexposed to an entirely different posture towards the responsibilities and measures required tobe secure.In its 11thversion, CEHcontinues to evolve with the latest operating systems, tools, tactics, exploits,and technologies. Here are some critical updates of CEH v11:Incorporating Perrot Security OSWhen compared to KaliLinux,ParrotSecurityOSoffers better performance on lower-poweredlaptops and machines while offering an intuitive look and feel with a larger repository ofgeneral tools.Re-Mapped to NIST/NICE FrameworkCEH v11is mapped rigorously to important Specialty Areas under the NIST/NICE framework’sProtect and Defend (PR) job role category overlapping with other job roles, including Analyze(AN) and Securely Provision(SP).Enhanced Cloud Security, IoT, and OT ModulesCEHv11covers updated Cloud and IoTmodules to incorporate CSP’s Container Technologies(e.g., Docker, Kubernetes), Cloud Computing threats, and a number of IoT hacking tools(e.g. Shikra, Bus Pirate, Facedancer21, and more). This is critical as the world moves towardsbroader and deeper cloud adoptions.Cloud Based ThreatsAs the cloud industry is estimated to reach 354 billion by 2022, the businesses struggleto limit the frequency of data theft incidents due to misconfigured cloud environments.January to April 2020 alone saw a 630%spike in cloud-based attacks. Learn how to avoid,identify, and respond to cloud-based attacks with CEHv11.CERTIFIED ETHICALHACKER03

IoT ThreatsMarket reports anticipate that the worldwide IoT-connected devices are expected toreach 43 billion by 2023. To support this rapid expansion, the prominent players of theinternet, including Amazon Web Services, Google, IBM, Microsoft, are swiftly shifting toprivate cloud services, creating complexities in IoT ecosystems. Learn to deal with IoTbased attacks with the CEH v11course that covers the latest IoT hacking tools, such asShikra,Bus Pirate, Facedancer21, and manyothers.Operational Technology (OT} AttacksLast year, businesses experienced a 2,000%increase in OTbased incidents. You can gainexpertiseinOT,IT,and IIoT(industrialIoT)tosecurea criticalenterpriseOT/IoTdeployments.Tolearn the advanced skillsof OT,CEHcovers conceptsof OT,such as ICS,SCADA,and PLC,various challenges of OT, OT hacking methodology, tools, communication protocols ofan OT network like Modbus, Profinet, HART-IP, SOAP,CANopen, DeviceNet, Zigbee, Profibus,etc., and gaining Remote Access usingDNP3protocol.Modern Malware AnalysisCEH v11 now includes the latest malware analysis tactics for ransomware, banking andfinancial malware, IoTbotnets, OT malware analysis, Android malware, andmore!Covering the Latest Threats - Fileless MalwareAs the security community observed a rise in fileless attacks, it began to raise concernsabout filelessmalware attacks. Asfileless malware isa relatively newform of malware attack,organizations find it difficult to detect with endpoint security solutions. With the CEH v11,youcan now learn various fileless malware techniques with associated defensive strategies, asthe course focuses on the taxonomy of filelessmalware threats, filelessmalware obfuscationtechniques to bypass antivirus, launching fileless malware through script-based injection,launching fileless malware through phishing, and more.New Lab Designs and Operating SystemsThis latest iteration of CEH v11 includes new operating systems, including Windows Server2019, Windows Server 2016, and Windows 10configured with Domain Controller, firewalls, andvulnerable web applications for practicing and improving hacking skills.Increased Lab Time and Hands on FocusMore than 50% of the CEH v11 course is dedicated to practical skills in live ranges via ECCouncil labs. EC-Council leads in this aspect of the industry.Industry’s Most Comprehensive Tools LibraryThe CEHv11course includes a library of the latest tools required by security practitioners andpen testers across theworld.CERTIFIED ETHICALHACKER04

BREAK-THE-CODE Challenge!BTC takes Gamification to the next level, packed with 24 incredible Hacking Challenges(on steroids!), across 4 levels of complexity covering 18 attack vectors, including theOWASP Top 10!Covers vulnerabilities ranging from a basic cross-site script to advanced multi-levelpivoting, ultimately giving access to the entire server.Some of the vulnerabilities covered are XSS, SQLi,IDoR,and Remote Code Execution.Learners are required to possess varied skills and procedures in order to capture theflag of each vulnerability at different levels.Comes with an interactive UI,to which learners connect through a VPN to accessapplications.Contains a dynamic scoringsystem tracking a learner’s rise up levels, with competitorswatching this on the portal’sdashboard.CERTIFIED ETHICALHACKER05

Course OutlineModule 01Introduction to EthicalHackingModule 02Footprinting and ReconnaissanceModule 03Scanning NetworksModule 0 4EnumerationModule 05Vulnerability AnalysisModule 06System HackingModule 07Malware ThreatsModule 08SniffingModule 09Social EngineeringModule 10Denial-of-ServiceModule 11Session HijackingModule 12Evading IDS, Firewalls, and HoneypotsModule 13Hacking Web ServersModule 14Hacking Web ApplicationsModule 15SQL InjectionModule 16Hacking WirelessNetworksModule 17Hacking Mobile PlatformsModule 18IoT and OTHackingModule 19Cloud ComputingModule 20CryptographyCERTIFIED ETHICALHACKER06

W hat You Will Learn ? Key issues include plaguing theinformation security world, ethicalhacking, information securitycontrols,laws, and standards. Web server attacks and acomprehensive attack methodologyto audit vulnerabilities in web serverinfrastructure, and countermeasures. Perform footprinting andreconnaissance using the latestfootprinting techniques and tools asa critical pre-attack phase required inethical hacking. Web application attacks andcomprehensive web applicationhackingmethodology to audit vulnerabilities inweb applications, andcountermeasures.Network scanning techniquesandscanning countermeasures. SQL injection attack techniques, injectiondetection tools to detect SQL injectionattempts, and countermeasures. Enumeration techniques andenumeration countermeasures. Vulnerability analysis to identify securityloopholes in the target organization’snetwork, communication infrastructure,and end systems.Wireless encryption, wireless hackingmethodology, wireless hacking tools,andWi-Fi security tools. Mobile platformattack vector, androidvulnerability exploitations, and mobilesecurity guidelines and tools. System hacking methodology,steganography, steganalysis attacks,and covering tracks to discover systemand networkvulnerabilities. Firewall, IDS and honeypot evasiontechniques, evasion tools andtechniques to audit anetwork perimeterfor weaknesses, and countermeasures. Different types of malware(Trojan,Virus, worms, etc.), system auditing formalware attacks, malware analysis,andcountermeasures. Cloud computing concepts(Containertechnology, serverless computing),various threats/attacks, and securitytechniques and tools. Packet sniffing techniques todiscover network vulnerabilities andcountermeasures to defend sniffing. Penetration testing, security audit,vulnerability assessment, andpenetration testing roadmap. Social engineering techniques and howto identify theft attacks to audit humanlevel vulnerabilities and suggest socialengineering countermeasures. Threats to IoT and OT platforms andlearn how to defend IoT andOT devicessecurely. Cryptography ciphers, Public KeyInfrastructure (PKI), cryptographyattacks, and cryptanalysis tools. DoS/DDoS attack techniques andtools to audit a target and DoS/DDoScountermeasures. Session hijacking techniques todiscovernetwork-level session hic weaknesses, andcountermeasures.CERTIFIED ETHICALHACKER07

Target Audience Information Security Analyst/Administrator Information Assurance (IA)SecurityOfficer Information Security Manager/Specialist Information Systems Security Engineer/ManagerSuggested CourseDurationTrainingBoot CampsDays: 5Minimum Hours: 40Academic Courses Information Security Professionals/OfficersDays: Adapts according to theacademicformat of universities Information Security / ITAuditorsMinimum Hours: Vary according toprogram requirements ofuniversities Risk/ Threat/Vulnerability Analyst System Administrators Network Administrators and EngineersCERTIFIED ETHICALHACKER08

CEH (ANSI)CEH (PRACTICAL)Exam Title:Certified Ethical Hacker (ANSI)Exam Title:Certified Ethical Hacker (Practical)Exam Code:312-50 (ECC EXAM), 312-50 (VUE)Number of Practical Challenges:20Number of Questions:125Duration:6 hoursDuration:4 hoursAvailability:Aspen- iLabsAvailability:ECCEXAM / VUETest Format:iLabs cyber rangeTest Format:Multiple ChoicePassing Score:70%Passing Score:Please refer tohttps://cert.eccouncil.org/faq.htmlCERTIFIED ETHICALHACKER09