The 20 CEH v13 Modules¶
The core knowledge domains of the Certified Ethical Hacker (CEH v13) curriculum. Each page covers the concepts, a Mermaid flow, the tools (by purpose), and a Countermeasures / Defense section — all framed for understanding and defense.
⚖️ Techniques here are for authorized, educational use only — see legal & ethics.
| # | Module | Theme |
|---|---|---|
| 1 | Introduction to Ethical Hacking | CIA triad, kill chain, hacker classes, laws |
| 2 | Footprinting & Reconnaissance | OSINT, passive/active recon |
| 3 | Scanning Networks | Host discovery, port scanning, TCP handshake |
| 4 | Enumeration | NetBIOS/SNMP/LDAP/SMTP/DNS info extraction |
| 5 | Vulnerability Analysis | CVE/CVSS, scanners, vuln-management lifecycle |
| 6 | System Hacking | Access → escalation → persistence (conceptual) |
| 7 | Malware Threats | Virus/worm/trojan/ransomware/rootkit, APT, analysis |
| 8 | Sniffing | Packet capture, ARP poisoning, MITM |
| 9 | Social Engineering | Phishing, pretexting, insider threats |
| 10 | Denial-of-Service | DoS/DDoS, botnets, amplification |
| 11 | Session Hijacking | App- & network-level hijacking, tokens |
| 12 | Evading IDS, Firewalls & Honeypots | How defenses work & detecting evasion |
| 13 | Hacking Web Servers | Misconfig, hardening, WAF |
| 14 | Hacking Web Applications | OWASP Top 10, secure coding |
| 15 | SQL Injection | Root cause & parameterized-query defense |
| 16 | Hacking Wireless Networks | WEP/WPA/WPA2/WPA3, rogue/evil-twin APs |
| 17 | Hacking Mobile Platforms | Android/iOS, OWASP Mobile, MDM |
| 18 | IoT & OT Hacking | ICS/SCADA/PLC, Purdue model, segmentation |
| 19 | Cloud Computing | IaaS/PaaS/SaaS, shared responsibility, CSPM |
| 20 | Cryptography | Symmetric/asymmetric, hashing, PKI |
➡️ How these map to the 5 phases: five-phases-of-hacking.md. Tools across modules: tools-by-phase.md.