Certified Ethical Hacker

Information Gathering Techniques

· Passive and active reconnaissance

· Using search engines, social networks, and websites for footprinting

Network Enumeration

· WHOIS, DNS footprinting, and email footprinting

· Tools and countermeasures for reconnaissance

Network Scanning Concepts

· Identify live systems and open ports

· Understand scanning methodologies

Vulnerability Identification

· Use scanning tools to detect vulnerabilities

· Evading detection during scanning

Enumeration Techniques

· NetBIOS, SNMP, LDAP, and NFS enumeration

· Windows and Linux enumeration

Countermeasures

· Mitigating enumeration attacks

Vulnerability Assessment Concepts

· Identifying security loopholes in target environments

· Vulnerability classification and scoring

Tools and Techniques

· Conduct vulnerability assessments with automated tools

· Interpreting vulnerability scan results

Gaining Access

· Password cracking techniques

· Privilege escalation methods

Maintaining Access and Clearing Tracks

· Backdoors, Trojans, and rootkits

· Covering tracks and clearing logs

Types of Malware

· Viruses, worms, Trojans, ransomware, and spyware

Infection Vectors and Countermeasures

· Malware propagation techniques

· Detection and prevention strategies

Sniffing Concepts

· Packet sniffing techniques and protocols at risk

Sniffing Tools and Defenses

· ARP poisoning, MAC flooding, DHCP attacks

· Sniffing detection and mitigation

Social Engineering Tactics

· Phishing, impersonation, and insider threats

Defense Mechanisms

· Employee training and awareness

· Policy and procedural defenses

DoS and DDoS Attacks

· Attack methodologies and tools

· Amplification and reflection attacks

Detection and Mitigation

· DoS protection strategies

Session Hijacking Techniques

· Types of session hijacking

· TCP/IP hijacking, cookie hijacking

Prevention and Countermeasures

· Encryption and secure protocols

Intrusion Detection and Prevention

· IDS/IPS evasion techniques

· Firewall evasion tactics

Honeypot Concepts

· Deploying and detecting honeypots

Web Server Vulnerabilities

· Misconfigurations and default settings

· Exploiting web server weaknesses

Defense Strategies

· Hardening and patching web servers

Common Web Application Attacks

· SQL injection, XSS, CSRF, and command injection

Exploitation Tools and Countermeasures

· OWASP Top 10 security practices

SQL Injection Techniques

· In-band, inferential, and out-of-band injection

Detection and Mitigation

· Secure coding practices

· Use of parameterized queries

Wireless Attack Vectors

· WEP/WPA/WPA2 vulnerabilities

· Rogue access points and evil twins

Defense Strategies

· Wireless security best practices

Mobile Attack Techniques

· Mobile malware, app exploits, and OS vulnerabilities

Security Measures

· Mobile device management (MDM) and endpoint protection

IoT and Operational Technology Threats

· IoT device vulnerabilities

· SCADA/ICS exploitation techniques

Defense Strategies

· IoT security frameworks and controls

Cloud Security Concepts

· Cloud service models and threats

· Cloud attack techniques and tools

Defense Mechanisms

· Securing cloud environments

Encryption and Cryptographic Attacks

· Symmetric/asymmetric encryption, hashing, and PKI

Exploitation Techniques

· Cryptographic attacks and countermeasures