Certified Ethical Hacker (CEH v12) Technical Skills in 2 Weeks
Published by O'Reilly Media, Inc.
Ethical hacker activities in detail & passing v12 +AI
You can make a good living in the computing world by exposing everyone else’s poor systems administration. Achieving the Certified Ethical Hacker (CEH v12) certification shows your proficiency with the latest commercial-grade hacking tools, techniques, and methodologies used to lawfully hack organizations—and is a great way to get started on your cybersecurity career.
Join cybersecurity professional Dean Bushmiller to build your ethical hacking expertise and learn the best practices, strategies, and tips that will help you pass the CEH v12 on your first go. In four sessions over two weeks, you’ll explore the five phases of hacking—reconnaissance, gaining access, enumeration, maintaining access, and covering tracks—and get hands-on to deploy attacker and victim machines in a series of exercises. Each tool and technique will be mapped to the phases of hacking in a meaningful way.
Dean has been hired to test many organizations and has been a CEH since version 6. Benefit from his extensive experience as you build a deliberate cybersecurity practice. You won’t regret it.
Week 1: Session 1—Footprinting, Reconnaissance, Scanning, and Sniffing Collecting external data readily available to the world typically goes undetected. Wireshark and Nmap are excellent tools for most of these tasks. In Session 1, you’ll learn how to put them to work.
Week 1: Session 2—Enumeration and Vulnerability Assessments Organizations demand information on the true risk of unpatched systems. In Session 2, you’ll discover how to deliver risk assessment using OpenVAS and a great deal of real research.
Week 2: Session 3—System Hacking and Hijacking Adversaries say victims have been “pwned” when they allow an adversary to gain complete control with just one exploit. In Session 3, you’ll see why ethical hackers must try every known exploit and document all the ways they achieved control with tools like Metasploit and bettercap.
Week 2: Session 4—Web Servers, Web Applications, and SQL Injection An organization’s most likely targets are its web presence, middleware, and backend systems. In Session 4, you’ll learn how to use ethical hacking tools including Burp Suite, WebScarab, BeEF, and sqlmap to defend them.
NOTE: With today’s registration, you’ll be signed up for all four sessions. Although you can attend any of the sessions individually, we recommend participating in all four sessions over two weeks.
What you’ll learn and how you can apply it
By the end of this live online course, you’ll understand:
Week 1: Session 1—Footprinting, Reconnaissance, Scanning, and Sniffing
- How to extract information about the victim organization from outside the target’s view
- How to discover communication channels, probe client-server connections, and document for future use
- How to perform packet sniffing on the victim network using tools such as Wireshark
Week 1: Session 2—Enumeration and Vulnerability Assessments
- How to enumerate a system’s active connection and perform queries to gain specific information about the victim
- How to identify unpatched or unpatchable systems that represent the failure of information technology defenders to protect the victim
Week 2: Session 3—System Hacking and Hijacking
- How to gain access, escalate privileges, maintain access, and clear logs to complete a system hack
- How to intercept traffic between a server and a client at most layers of the TCP/IP stack
Week 2: Session 4—Web Servers, Web Applications, and SQL Injection
- How to combine system hacking techniques together in a new way for the specific purpose of attacking web servers
- How to use client-side script interruption techniques to gain access to the victim server or the reverse
- How to determine which SQL injection type will yield access to sensitive data
And you’ll be able to:
Week 1: Session 1—Footprinting, Reconnaissance, Scanning, and Sniffing
- Apply the professional penetration testing models ATT&CK and Cyber Kill Chain
- Understand a packet using Wireshark
Week 1: Session 2—Enumeration and Vulnerability Assessments
- Use the EC-Council’s top 10 hacking tools, discussed on the version 11 exam
- Calculate impact metrics, vulnerability types, and applicability statements
Week 2: Session 3—System Hacking and Hijacking
- Compromise an unprotected web server
- Perform SQL injection
- Attack OWASP’s top 10 threats
Week 2: Session 4—Web Servers, Web Applications, and SQL Injection
- Prepare to pass the v11 exam on your first attempt
- Apply ethical hacking processes to target systems
- Implement your own isolated hacking laboratory
This live event is for you because...
- You need to prepare for CEH certification and want a clear plan to do so.
- You’re a security assessor or auditor.
- Your organization has a DOD 8570 certification requirement.
Prerequisites
- A computer with the lab environment set up (instructions)
- An understanding of the topics from the CompTIA Network+ and Security+ certifications
- Experience with networking, operating systems, and scripting languages
Recommended preparation:
- Review the course GitHub repository and wiki
- Explore Kali Linux Tutorial for Beginners (video course)
- Watch Network Analysis Using Wireshark 3 (video)
- Explore The Complete Ethical Hacking Course - Wireshark (video course)
- Explore Linux for Network Engineers: Practical Linux with GNS3 (video course)
Recommended follow-up:
- Follow and explore CEHv11 Certified Ethical Hacker (expert playlist)
- Watch Windows Server 2019 Inside Out (video)
Schedule
The time frames are only estimates and may vary according to how the class is progressing.
Week 1: Session 1—Footprinting, Reconnaissance, Scanning, and Sniffing
Introduction to the CEH v12 (40 minutes)
- Presentation: Student expectations
- Hands-on exercise: Use glossary and notecards
The ethical hacker thought process: Part I (30 minutes)
- Presentation, demos, and hands-on exercises: Ethical hacker thought process; Wireshark—continuous capture and filter
- Hands-on exercise: Set up lab—Maltego, Nmap, Wireshark, DNS, search, and social
- Break
Footprinting and fingerprinting (40 minutes)
- Presentation, demos, and hands-on exercises: Footprinting and fingerprinting with Nmap and Maltego
- Q&A
- Break
Reconnaissance and postscope adjustments (40 minutes)
- Presentation, demos, and hands-on exercises: Reconnaissance and postscope adjustments
- Q&A
- Break
Scanning at enterprise scale with Nmap and NSE (40 minutes)
- Presentation, demos, and hands-on exercises: Scanning at enterprise scale with Nmap and NSE
- Q&A
- Break
Sniffing as a easy collection tool (40 minutes)
- Presentation, demos, and hands-on exercises: Sniffing as a easy collection tool—SPAN, tap, and splice
- Q&A
Wrap-up and Q&A (10 minutes)
Week 1: Session 2—Enumeration and Vulnerability Assessments
Introduction to Session 2 (40 minutes)
- Presentation: Student expectations
- Hands-on exercise: Use glossary and notecards
The ethical hacker thought process: Part II (30 minutes)
- Presentation and demos: Ethical hacker thought process
- Hands-on exercise: Set up lab—OpenVAS and Maltego
Enumeration (40 minutes)
- Presentation, demos, and hands-on exercises: Enumeration—subjects, objects, databases, and flat files
- Q&A
- Break
Vulnerability assessments (40 minutes)
- Presentation, demos, and hands-on exercises: Vulnerability assessments
- Q&A
- Break
Nmap into OpenVAS (40 minutes)
- Presentation, demos, and hands-on exercises: Nmap into OpenVAS; building NASL files
- Q&A
- Break
Research NVD and ATT&CK (40 minutes)
- Presentation, demos, and hands-on exercises: Research NVD and ATT&CK
- Q&A
Wrap-up and Q&A (10 minutes)
Week 2: Session 3—System Hacking and Hijacking
Introduction to Session 3 (40 minutes)
- Presentation: Student expectations
- Hands-on exercise: Use glossary and notecards
The ethical hacker thought process: Part III (30 minutes)
- Presentation and demos: Ethical hacker thought process
- Hands-on exercise: Set up lab—Nmap, OpenVAS, Metasploit, and bettercap
Interception and hijacking (40 minutes)
- Presentation, demos, and hands-on exercises: Interception and hijacking
- Q&A
- Break
Compromising operating systems (40 minutes)
- Presentation, demos, and hands-on exercises: Compromising each operating system
- Q&A
- Break
Iteration of all relevant attacks (40 minutes)
- Presentation, demos, and hands-on exercises: Iteration of all relevant attacks
- Q&A
- Break
Virtual images protect operations (40 minutes)
- Presentation, demos, and hands-on exercises: Virtual images protect operations
- Q&A
Wrap-up and Q&A (10 minutes)
Week 2: Session 4—Web Servers, Web Applications, and SQL Injection
Introduction to Session 4 (30 minutes)
- Presentation: Student expectations
- Hands-on exercise: Use glossary and notecards
The ethical hacker thought process: Part IV (30 minutes)
- Presentation and demos: Ethical hacker thought process
- Hands-on exercise: Set up lab—Snort, Burp Suite, and WebScarab or BeEF, sqlmap, and WebGoat
Three-tier web server attacks (60 minutes)
- Presentation, demos, and hands-on exercises: Three-tier web server attacks
- Q&A
- Break
Takeovers, redirects, and DOS attacks (40 minutes)
- Presentation, demos, and hands-on exercises: Takeovers, redirects, and DOS attacks
- Q&A
- Break
SQL injection (70 minutes)
- Presentation, demos, and hands-on exercises: SQL injection
- Q&A
- Break
Wrap-up and Q&A (10 minutes)
Your Instructor
Dean Bushmiller
Dean Bushmiller consults on cybersecurity, incident response, and penetration testing and is using AI to build and secure learning platforms. He’s been teaching cybersecurity since 1999, has over 1,000 hours of recorded cybersecurity training, and a lifetime instructor approval rating of over 90%. He has also achieved more than 36 major cybersecurity certifications and passed over 100 certification exams.
Dean built the full library of NICE framework knowledge statements, which includes over 600 basic, intermediate, and advanced cybersecurity topics in an easy one-hour online format. Though he’s not a member of the military, he has had the honor to train the US military since 1999. In recognition for outstanding service in the information assurance field, he has received eight mission coins.