CEH: from security principles to evidence
A core-concept path across twenty modules. Each module includes complete bilingual reading, original Q&A and an offline or tabletop exercise. M01 begins with two lessons.
This independently written series introduces core concepts. It is not official EC-Council courseware, a collection of exam questions or a guarantee of exam readiness. v13 identifies the course-module reference; the exam scope is checked separately against Exam Blueprint v5.0.
Official exam blueprint PDF · Content principles & versions- M01
Introduction to Ethical Hacking
Establish authorization, then describe security goals with CIA.
- M02
Footprinting and Reconnaissance
Separate public information, active interaction and inference.
- M03
Scanning Networks
Interpret port states in their observation context.
- M04
Enumeration
Build verifiable resource lists from service responses.
- M05
Vulnerability Analysis
Turn severity into context-aware remediation priorities.
- M06
System Hacking
Understand identity, permissions and least privilege.
- M07
Malware Threats
Use behavior and evidence to guide containment and investigation.
- M08
Sniffing
Reason about payload, encryption and metadata visibility.
- M09
Social Engineering
Verify sensitive requests through an independent channel.
- M10
Denial-of-Service
Understand availability through resource limits and defense tradeoffs.
- M11
Session Hijacking
Understand a session token’s authority and lifecycle.
- M12
Evading IDS, Firewalls, and Honeypots
Use an allow, block and alert matrix to assess controls.
- M13
Hacking Web Servers
Inventory exposure, updates and minimal service configuration.
- M14
Hacking Web Applications
Check authorization for every object request.
- M15
SQL Injection
Separate commands and data with parameterized queries.
- M16
Hacking Wireless Networks
Separate network access trust from end-to-end encryption.
- M17
Hacking Mobile Platforms
Assess permissions against purpose and timing.
- M18
IoT and OT Hacking
Account for physical safety and maintenance windows.
- M19
Cloud Computing
Assign provider and customer duties by service model.
- M20
Cryptography
Choose hashing, encryption and signatures for distinct goals.