Skip to content

Index

# 🎯 Certified Ethical Hacker (CEH) — Study Hub ### A source-grounded, **defense-oriented** study hub for the EC-Council **CEH v13** *Concepts, real diagrams, tools, labs, and exam prep* — for a sysadmin moving into offensive-aware **blue-team / ethical hacking** work. ![Version](https://img.shields.io/badge/CEH-v13%20(AI)-red) ![Modules](https://img.shields.io/badge/modules-20-blue) ![Exam](https://img.shields.io/badge/exam-125Q%20%2F%204h%20%2F%2060–85%25-1f6feb) ![Diagrams](https://img.shields.io/badge/diagrams-Mermaid-ff3670) ![Facts](https://img.shields.io/badge/facts-source--grounded-success) ![Use](https://img.shields.io/badge/use-educational%20%26%20authorized%20only-orange)

[!WARNING] Educational & authorized use only. This material explains attack techniques at a conceptual level for understanding and defense — every offensive topic is paired with countermeasures. Performing these techniques against systems you do not own or are not explicitly authorized in writing to test is illegal. See Legal & ethics first.

[!NOTE] Unofficial & no fabrication. Not affiliated with or endorsed by EC-Council. Facts are tied to EC-Council and reputable sources (NIST, MITRE ATT&CK, OWASP, RFCs); unknowns are marked “not specified in sources.” Verify version/exam specifics at eccouncil.org. Compiled 2026-06-18.

🔁 The 5 phases of ethical hacking

flowchart LR
    R["1 · Reconnaissance<br/>footprinting / OSINT"] --> S["2 · Scanning<br/>& Enumeration"]
    S --> G["3 · Gaining Access<br/>exploitation"]
    G --> M["4 · Maintaining Access<br/>persistence"]
    M --> C["5 · Clearing Tracks<br/>anti-forensics"]

See five-phases-of-hacking.md for the phase → module mapping and the Cyber Kill Chain / MITRE ATT&CK alignment.

📋 Exam at a glance

Track Format Pass Notes
CEH (knowledge) 125 multiple-choice questions · 4 hours · code 312-50v13 60–85% (scaled cut-score per form) The “ANSI” exam
CEH Practical 20 real-world challenges · 6 hours · iLabs Cyber Range 60–85% Hands-on, optional
CEH Master Awarded for passing both above

Full details: exam & eligibility.

🗺️ Learning path

flowchart LR
    O["1 · Overview<br/>what/exam/phases/ethics"] --> D["2 · Domains<br/>the 20 modules"]
    D --> T["3 · Tools<br/>by phase"]
    T --> L["4 · Labs<br/>safe isolated practice"]
    L --> E["5 · Exam prep<br/>plan · questions · cheat sheet"]
    E --> C["6 · Career<br/>roles & adjacent certs"]
    Ref["📚 Reference<br/>glossary · acronyms"] -.-> D
    Ref -.-> E

📦 What's inside

Section Contents
00-overview/ What is CEH · Exam & eligibility · 5 phases · Legal & ethics · AI in ethical hacking · Engagement & reporting
domains/ The 20 CEH modules — concepts, flows, tools, and countermeasures
tools/ Common tools mapped to phases/modules (purpose only)
labs/ Build a safe lab · Practice ranges
exam-prep/ Study plan · Practice questions · Cheat sheet
career/ CEH's place in a career & adjacent certifications
reference/ Glossary · Acronyms

CEH, C|EH and EC-Council are trademarks of EC-Council, used here for identification and educational purposes only.