What Topics Are Covered in the CEH Exam Syllabus?

Table of Contents

• Overview of the CEH Exam
• The Structure of the CEH Syllabus
• Foundational Topics (Modules 1-5)
• Core Hacking Techniques (Modules 6-11)
• Advanced Attacks and Evasions (Modules 12-15)
• Specialized Hacking Areas (Modules 16-20)
• AI Integration in the Syllabus
• CEH Syllabus Summary Table
• Tips for Mastering the Syllabus
• Conclusion
• FAQs

Overview of the CEH Exam

The CEH exam, coded as 312-50, is a four-hour test with 125 multiple-choice questions. It assesses your understanding of ethical hacking principles and practices. To pass, you need a score of at least 60-85%, depending on the version's cut score. The exam is proctored, meaning it's supervised to ensure fairness, and you can take it online or at a testing center.

Why focus on the syllabus? It outlines the 20 modules that form the backbone of the certification. Each module builds on the last, starting with basics and progressing to complex scenarios. The syllabus is designed to mimic the hacker's methodology: reconnaissance, scanning, gaining access, maintaining access, and covering tracks. This structured approach helps you not just pass the exam but apply knowledge in real life.

In 2025, with cyberattacks costing trillions globally, CEH's relevance is undeniable. It covers over 550 attack techniques and includes hands-on labs for practical learning. Plus, it's ANSI-accredited, adding credibility to your resume. If you're new to this, don't worry—the syllabus is beginner-friendly with proper guidance.

Eligibility is straightforward: either two years of IT experience or official training. The cost? Around $1,199 for the exam voucher. But the investment pays off, as CEH holders often see salary boosts in roles like penetration tester.

The Structure of the CEH Syllabus

The CEH v13 syllabus is divided into 20 modules, each focusing on a specific aspect of ethical hacking. It's not just theoretical; it emphasizes tools, techniques, and countermeasures. You'll learn offensive strategies to understand defenses better.

Modules are weighted differently in the exam, with core areas like system hacking and vulnerability analysis taking a larger share. Expect questions that test conceptual knowledge, tool usage, and scenario-based problem-solving. The syllabus also incorporates emerging tech, ensuring you're prepared for today's threats.

To study effectively, use official resources like the CEH courseware, which includes videos, labs, and practice tests. Third-party books and online forums can supplement, but stick to accredited materials for accuracy.

Foundational Topics (Modules 1-5)

These early modules lay the groundwork, introducing concepts that underpin the rest of the syllabus. They're perfect for beginners, explaining terms like "vulnerability" (a weakness in a system) and "exploit" (code that takes advantage of it).

Module 1: Introduction to Ethical Hacking. This covers the basics: what ethical hacking is, types of hackers (white hat for good, black hat for bad), and key concepts like confidentiality, integrity, and availability (CIA triad). You'll learn about laws and ethics, ensuring you hack legally with permission. Why important? It sets the moral compass for your career.

Module 2: Footprinting and Reconnaissance. Here, you gather information about targets passively, like checking websites or social media. Tools include Google hacking (advanced searches) and WHOIS for domain details. It's like detective work non-intrusive but revealing.

Module 3: Scanning Networks. This involves active probing: using Nmap to find open ports (entry points) and services. You'll identify live systems and map networks, crucial for spotting potential attack vectors.

Module 4: Enumeration. Dig deeper to extract specifics, like user names via SNMP (a network protocol) or NetBIOS. This module teaches how to list resources without full access, helping in targeted attacks or defenses.

Module 5: Vulnerability Analysis. Learn to scan for weaknesses using tools like Nessus. You'll classify vulnerabilities (e.g., high-risk ones) and understand assessment methodologies. This is key for prioritizing fixes in real security audits.

These modules build analytical skills, teaching you to think methodically about security.

Core Hacking Techniques (Modules 6-11)

Moving into the heart of hacking, these modules focus on gaining and maintaining access. They're hands-on, with labs simulating attacks.

Module 6: System Hacking. Cover password cracking (guessing or brute-forcing), privilege escalation (gaining higher access), and executing applications. Tools like John the Ripper help here. Countermeasures include strong passwords and multi-factor authentication.

Module 7: Malware Threats. Explore viruses, worms, trojans, and ransomware. You'll learn creation (for educational purposes), detection, and analysis using sandboxes (isolated environments). Vital in today's malware-heavy landscape.

Module 8: Sniffing. This is capturing network traffic with Wireshark. Understand switched vs. hub networks and defenses like encryption. It's like eavesdropping on digital conversations.

Module 9: Social Engineering. The human element: phishing (fake emails), pretexting, and baiting. Skills include psychology basics and countermeasures like awareness training. Often, people are the weakest link.

Module 10: Denial-of-Service. Overwhelm systems to make them unavailable. Cover DoS vs. DDoS (distributed), tools like LOIC, and mitigations like rate limiting.

Module 11: Session Hijacking. Steal active sessions using tools for cookie theft. Learn about TCP/IP hijacking and protections like HTTPS.

These topics sharpen your offensive skills while emphasizing defenses.

Advanced Attacks and Evasions (Modules 12-15)

Here, the syllabus dives into stealth and web-based threats, building complexity.

Module 12: Evading IDS, Firewalls, and Honeypots. Intrusion Detection Systems (IDS) spot attacks; learn to bypass them with fragmentation or spoofing. Honeypots are decoys understand setup and evasion.

Module 13: Hacking Web Servers. Target servers like Apache or IIS. Cover misconfigurations, footprinting servers, and attacks like directory traversal (accessing restricted files).

Module 14: Hacking Web Applications. Focus on apps: OWASP top 10 risks, like broken authentication. Tools include Burp Suite for testing.

Module 15: SQL Injection. Exploit database queries by injecting code. Learn types (union-based), tools like SQLMap, and preventions like input sanitization.

These modules prepare you for common web vulnerabilities, rampant in e-commerce and apps.

Specialized Hacking Areas (Modules 16-20)

The final modules cover niche but growing areas, rounding out your expertise.

Module 16: Hacking Wireless Networks. Crack Wi-Fi: WEP, WPA vulnerabilities. Tools like Aircrack-ng; countermeasures include WPA3.

Module 17: Hacking Mobile Platforms. Android/iOS: app vulnerabilities, rooting/jailbreaking. Learn mobile forensics and secure coding.

Module 18: IoT and OT Hacking. Internet of Things (smart devices) and Operational Technology (industrial systems). Cover protocol weaknesses like MQTT and SCADA attacks.

Module 19: Cloud Computing. AWS, Azure threats: misconfigured buckets, IAM issues. Learn cloud pen-testing and compliance.

Module 20: Cryptography. Encryption basics: symmetric (AES) vs. asymmetric (RSA), hashing. Understand attacks like brute-force on weak keys.

These ensure you're versatile in modern tech landscapes.

AI Integration in the Syllabus

CEH v13 weaves AI throughout modules, teaching AI-driven tools for automation and threat detection. For example, use ML for anomaly detection in vulnerability analysis or AI in social engineering deepfakes. This prepares you for AI-enhanced cyberattacks, a hot topic in 2025.

Skills include ethical AI use, like generating attack simulations. It's not a separate module but integrated, reflecting real-world fusion of AI and hacking.

CEH Syllabus Summary Table

Here's a quick reference table outlining the modules and key focus areas.

Tips for Mastering the Syllabus

To tackle this extensive syllabus, start with official training it's comprehensive and includes labs. Practice with tools in a virtual environment to avoid legal issues. Join study groups or forums for insights.

• Focus on weak areas: Use practice exams to identify gaps.
• Hands-on practice: Set up a home lab with Kali Linux.
• Stay updated: Follow cybersecurity news for real examples.
• Time management: Allocate study time per module.
• Review countermeasures: Exams test defenses too.

With dedication, you'll not only pass but excel.

Conclusion

The CEH exam syllabus is a thorough guide to ethical hacking, spanning 20 modules from basics to advanced topics like cloud and IoT. We've explored each area, highlighting key skills and real-world applications. In 2025, with AI integration, it's more relevant than ever for aspiring cybersecurity pros.

Understanding the syllabus demystifies the exam, making preparation focused and effective. Whether for career growth or passion, CEH equips you to combat cyber threats. Dive in, study smart, and become a certified ethical hacker  the digital world needs you!

Frequently Asked Question (FAQ)

What is the CEH exam?

The CEH exam tests your knowledge of ethical hacking through 125 questions on 20 modules.

How many modules are in the CEH syllabus?

There are 20 modules covering various hacking topics.

What is covered in Module 1?

Introduction to Ethical Hacking, including basics and ethics.

Does CEH include AI topics?

Yes, AI is integrated across modules for modern threats.

What tools are mentioned in the syllabus?

Tools like Nmap, Metasploit, Wireshark, and more.

Is vulnerability analysis important?

Yes, it's Module 5, focusing on finding and assessing weaknesses.

What is social engineering?

Module 9 covers manipulating people to gain info.

Does CEH cover cloud hacking?

Yes, in Module 19: Cloud Computing.

How long is the CEH exam?

Four hours.

What is the passing score for CEH?

60-85%, depending on the version.

Is CEH suitable for beginners?

Yes, with training; it starts from basics.

What is SQL injection?

Module 15: Exploiting database queries.

Does the syllabus include mobile hacking?

Yes, Module 17: Hacking Mobile Platforms.

What is cryptography in CEH?

Module 20: Encryption and related attacks.

How to prepare for the CEH exam?

Use official materials, labs, and practice tests.

Is there a practical component?

Yes, optional CEH Practical exam.

What jobs can CEH lead to?

Penetration tester, security analyst, etc.

How often is the syllabus updated?

Periodically; v13 is current in 2025.

Does CEH require experience?

Two years or training for eligibility.

What is IoT hacking?

Module 18: Attacks on smart devices.