Course overview
Ethical hacking is the discipline of understanding attacks well enough to prevent them. CEH v13 builds that understanding one methodology, one tool category and one real technique at a time — from reconnaissance and footprinting through scanning, enumeration and vulnerability analysis to system, network, web, wireless, mobile, cloud and IoT security, finishing with cryptography. Every concept is reinforced through guided, hands-on practice, and every practical exercise runs strictly within controlled, authorised lab environments. Training combines theory, demonstration and practical work, mapped to how cybersecurity actually works in practice.
Who this course is for
This course is designed for the following groups. If you are not sure whether you fit, ask us — a short conversation is more useful than a longer guess.
- Cybersecurity beginners
- College students and graduates
- Network administrators
- System administrators
- IT professionals
- Aspiring ethical hackers
- SOC and security analysts
- Security enthusiasts
- Professionals transitioning into cybersecurity
What you will learn
- How real-world attacks are planned and executed, stage by stage
- Reconnaissance and footprinting — how information gathering shapes every security assessment
- Identifying vulnerabilities in systems and networks before they can be exploited
- Where networks are exposed, and the risks unique to wireless environments
- How malware behaves, spreads and is detected
- How web platforms, web servers and web applications are attacked — and secured
- Security beyond the traditional perimeter: cloud, mobile and IoT
- How encryption and security controls are used to protect data
Curriculum
The course is taught in the module order below. Each module mixes explanation with hands-on work before moving on to the next.
- Introduction to Ethical Hacking
- Footprinting and Reconnaissance
- Scanning Networks
- Enumeration
- Vulnerability Analysis
- System Hacking
- Malware Threats
- Sniffing
- Social Engineering
- Denial-of-Service
- Session Hijacking
- Evading IDS, Firewalls and Honeypots
- Hacking Web Servers
- Hacking Web Applications
- SQL Injection
- Hacking Wireless Networks
- Hacking Mobile Platforms
- IoT Hacking
- Cloud Computing
- Cryptography
Tools and technologies
Everything used in the course is either free, open source, or available on a free tier suitable for learning. You will install and configure each of these during the course, not just watch someone else use them.
- Reconnaissance and footprinting tools
- Network scanning and enumeration tools
- Vulnerability assessment tools
- System hacking and malware analysis tools
- Packet sniffing and traffic analysis tools
- Web server and web application testing tools
- Wireless, mobile, cloud and IoT security tools
- Cryptography tools
- Controlled, authorised lab environment
Prerequisites
We would rather you arrive prepared than arrive surprised. These are the things you should already be comfortable with before the first session.
- No prior ethical hacking experience required — the programme is pitched at beginner to intermediate level
- Comfort using a computer and a web browser
- Basic familiarity with networks and operating systems is helpful
- Willingness to work in a command line and in lab environments
Hands-on labs, CTFs and projects
Most of the course is spent on machines. The work below is what turns each topic from something you have read about into something you can actually do.
- Gather information the way an attacker would in a reconnaissance and footprinting exercise
- Scan, enumerate and assess a lab network, then validate findings in a controlled environment
- Analyse malware behaviour and practise detection and countermeasures
- Test web servers and web applications, including SQL injection, in an authorised lab
- Explore wireless, mobile, cloud and IoT attack surfaces and their defences
- Apply cryptography and security controls to protect data in practical scenarios
- Every practical exercise runs strictly within controlled, authorised lab environments
Learning outcomes
When you finish this course, these are the things you should be able to do without looking them up. Anything you cannot yet do, the trainer will help you with during the final project review.
- Explain attacker methodologies stage by stage, from reconnaissance to exploitation
- Identify vulnerabilities in systems and networks before they can be exploited
- Assess web, wireless, mobile, cloud and IoT security exposures
- Analyse malware and apply detection and countermeasures
- Apply cryptography and security controls to protect data
- Think like an attacker, so you can defend like a professional
Career paths
This course supports the roles below. We do not make placement claims or guarantee outcomes — what you do with the skills is up to you — but these are the job titles that most often ask for what this course teaches.
- Ethical hacker
- SOC analyst
- Network security analyst
- Application security analyst
- Vulnerability assessment analyst
- Penetration tester
- Security operations analyst
Frequently asked questions
Yes. The programme is pitched at beginner to intermediate level and is built as a foundation-to-practical journey: it starts from foundational security concepts and works up to advanced, specialised domains. No prior ethical hacking experience is required.
Hands-on first. Every concept is reinforced through guided practice in controlled environments, and training combines theory, demonstration and practical work. The programme is 72 hours of intensive training across the full 20-module CEH v13 curriculum.
No. All practical exercises are conducted strictly within controlled, authorised lab environments as part of the training programme. The mindset taught is offensive — think like an attacker — but the practice is legal, contained and defensive in purpose.
The complete CEH v13 module structure: introduction to ethical hacking, footprinting and reconnaissance, scanning, enumeration, vulnerability analysis, system hacking, malware, sniffing, social engineering, denial-of-service, session hijacking, evading IDS and firewalls, web servers and web applications, SQL injection, wireless, mobile, IoT, cloud computing and cryptography.
Ethical hacking, SOC analysis, network and application security, vulnerability assessment, penetration testing and security operations — the programme is mapped to how cybersecurity actually works in practice rather than to a single job title.
