The EC-Council Certified Ethical Hacker (CEH) is the most recognized vendor-specific penetration testing certification for practitioners entering offensive security. It covers the full attack lifecycle — from reconnaissance to post-exploitation — and maps to real-world penetration testing methodology.
CEH v12 Coverage Areas
CEH v12 covers 20 modules organized around the ethical hacking methodology:
- Introduction to Ethical Hacking and Footprinting
- Network Scanning, Enumeration, and Vulnerability Analysis
- System Hacking and Malware Threats
- Sniffing, Social Engineering, and Denial of Service
- Session Hijacking and Evading IDS/Firewalls
- SQL Injection, Web Application Hacking
- Wireless Network Hacking and Mobile Platform Security
- IoT and OT Hacking, Cloud Computing Security
- Cryptography and Steganography
Exam Day Logistics
- Questions: 125 (multiple choice)
- Time: 4 hours
- Passing: 70% (varies by question difficulty)
- Delivery: ECC Exam Center (testing center or remote proctored)
- Cost: ~$950 (includes official courseware) or $100–500 for exam-only voucher
How to Study for CEH
CEH is methodology-heavy — the exam tests whether you know how attacks work and in what order, not just that they exist. Study the 5 phases of ethical hacking: Reconnaissance → Scanning → Gaining Access → Maintaining Access → Covering Tracks. Know which tools map to which phase: nmap (scanning), Metasploit (exploitation), John the Ripper (password cracking), Wireshark (sniffing), Hydra (brute force). The exam expects tool familiarity. CEH v12 added cloud hacking, IoT, and AI-based attack content — make sure your study material is current.
Watch: 100 CEH Terms to Know
Build your vocabulary before diving into practice questions — explained clearly, no fluff.
