Note: This is a long post so the PDF version is also available. You can download the PDF version. Click Here to Download (Wait for few seconds and then click on skip)
Hello Guys!!!
Hope you had a wonderful weekend. And KIITians, although the exams are over but
yet it’s not the right time to sleep instead utilize these time to learn
something new.
I know it’s a
boring Monday again and you all guys must be expecting any new trick. But I am
sorry to disappoint you, rather than giving a trick today I will give you the
basic idea about hacking and the CEH course. Well those who don’t know about
CEH, it stands for Certified Ethical Hacker, now I guess you all may have got some
idea regarding this.
The CEHv8 has
got 19 module all together. To get training you need to register to any
institute and then pay them with lots of money and again pay them for the
certificate exam. Just try to learn all those online and practice the questions
and then appear directly for the certificate exam. Anyway I won’t give any
boring lecture to you guys rather than I will tell you about those 19 modules.
Module 1:
Introduction to Ethical hacking
Module 2:
Footprinting and Reconnaissance
Module 3: Scanning
networks
Module 4:
Enumeration
Module 5:
System Hacking
Module 6:
Trojans and Backdoor
Module 7:
Viruses and Worms
Module 8:
Sniffers
Module 9:
Social Engineering
Module 10:
Denial of service
Module 11:
Session Hijacking
Module 12:
Hacking Web-servers
Module 13:
Hacking Web Applications
Module 14: SQL
injection
Module 15:
Hacking Wireless Networks
Module 16:
Evading IDS, Firewalls and Honeypots
Module 17:
Buffer Overflow
Module 18:
Cryptography
Module 19:
Penetration Testing
So, I guess you
all guys must be interested in knowing about each one of them. So, in today’s
post I will give introduction about all the modules and what all it actually
content.
Module 1:
Introduction to Ethical hacking
(This module is
bit boring, I know you guys hate theories) Through this module you can come to
know about:
- The elements of information security and its functionality
- Security challenges
- Effects of hacking
- Who the hacker is actually
- Classes of hackers
- Types of hackers
- Hacking phase
- Types of attack on the system
- Why ethical hacking is necessary
- Scope and limitations of ethical hacking
- What do ethical hackers do
- Vulnerability research
Module 2:
Footprinting and Reconnaissance
Footprinting is
the step in which we gather information about our victim. Through this module
you can come to know about:
- What is Footprinting?
- Objectives of Footprinting.
- Footprinting Threats
- Internet Footprinting
- Competitive Intelligence
- WHOIS Footprinting
- DNS Footprinting
- Network Footprinting
- Website Footprinting
- Email Footprinting
- Google Hacking
- Footprinting tools
- Footprinting Countermeasures
- Footprinting Pen testing
Module 3:
Scanning networks
Scanning is the
set of procedures for indentifying hosts, ports and services of network. It is
one of the components of intelligence gathering for an attacker to create a
profile of the target organization or person. This module covers about:
- Types of scanning and understanding the CEH scanning methods
- Checking Live systems and open ports
- Understanding Scanning techniques
- Different tools present to perform scanning
- Understanding banner grabbing and OS fingerprinting
- Drawing network diagrams of vulnerable hosts
- Preparing proxies
- Understanding Anonymizer
- Its countermeasures
- Scanning Pentesting
Module 4: Enumeration
Enumeration is
the process of extracting user names, machine names, network resources, shares,
and services from a system. It is mainly conducted in the intranet environment.
Through this module you can know about:
- Enumeration and its techniques
- NetBIOS Enumeration
- Enumerating user accounts
- SNMP Enumeration
- Unix/Linux Enumeration
- LDAP/Active directory Enumeration
- NTP Enumeration
- SMTP and DNS Enumeration
- Enumeration Countermeasures
Module 5:
System Hacking
This is one of
the longest module. System hacking mainly involves cracking the passwords and
breaking through the security of the system. This process is done after we
completely pass the above steps. Through this module you can come to know
about:
- Password Cracking and its techniques
- Types of Password attacks
- Automatic Password cracking algorithm
- Privilege Escalation
- Executing Application
- Keyloggers
- Spyware
- Rootkit
- Detecting Rootkits
- NTFS Data Stream
- What is Steganography?
- Steganalysis
- Covering tracks
Module 6:
Trojans and Backdoor
Trojans are
program in which the malicious or harmful codes are contained inside the
apparently harmless programming or data in such a way that it can get control
and cause damange, such as ruining the file allocation table on victim hard
disk. With the help of a Trojan, an attacker gets access to the stored
passwords in the Trojaned computer and would be able to read personal
documents, delete files and display pictures, or even send messages on the
screen. With this module you can know about:
- What is Trojan?
- Overt and Covert Channels
- Purpose of Trojans
- Indications of Trojan attacks
- Common Ports used by Trojans
- How to infect using Trojans
- How to deploy a Trojan?
- Types of Trojans
- How to detect Trojans?
- Evading Anti-virus techniques
- Countermeasures
- Anti-trojan softwares
- Penetration testing
Module 7:
Viruses and Worms
Virus is a
self-replicating program that produces its own code by attaching copies of
itself into other executables codes
- Introduction and stages of Virus life
- Working of virus
- Virus analysis
- Types of viruses
- Writing a simple virus program
- Computer Worms
- Worm Analysis
- What is sheep dip Computer?
- Malware analysis procedure
- Virus detection Methods
- Countermeasures
- Anti-virus tools
- Penetration testing for virus
Module 8:
Sniffers
Sniffing is the
process in which we constantly get sensitive information about our victim after
gaining the access of the victim network. We use sniffers for that and it can
cover up the network data, personal emails and other messages, network traffic,
etc. This module helps you to understand:
- Lawful Intercept
- Wiretapping
- Sniffing Threats
- Types of Sniffing
- Hardware Protocol Analyzers
- MAC Attacks
- DHCP Attacks
- ARP Poisoning Attacks
- Spoofing Attacks
- DNS Poisoning
- Sniffing Tools
- Countermeasures
Module 9:
Social Engineering
There is no
measure to measure the stupidity of humans. So social engineering basically
deals with the stupidity of human and take advantage of that. Through this
module you can learn:
- What is Social Engineering?
- Why is Social Engineering Effective?
- Phases in a Social Engineering Attack
- Common Targets of Social Engineering
- Types of Social Engineering
- Common Intrusion Tactics and Strategies for Prevention
- Social Engineering through Impersonation on Social Networking Sites
- Risks of Social Networking to Corporate Networks
- Identify Theft
- How to steal Identity?
- Countermeasures
- Pen Testing
Module 10:
Denial of service
It is an attack
on computer or network which stops the primary use of resources. In this
attack, attacker flood a system with the garbage requests which overload the
resource and prevents it from performing the important and primary works. This
module covers:
- What is DoS and DDoS attack?
- How DDoS attack works?
- Symptoms of DDoS attack.
- Internet Relay Chat (RLC)
- DoS attack technique
- Botnet
- Botnet Ecosystem
- DDoS case study
- DoS Attack tools
- Detection Techniques
- Countermeasures
- Techniques to defend against Botnets
- Protection tools
- Penetration testing
Module 11:
Session Hijacking
In this attack
the attacker hijack the data transfer between two computer or network and then
seals the valid session ID and finally snoop through the data. This module
covers:
- What is Session hijacking?
- Key session hijacking techniques
- Brute force
- Spoofing vs. Hijacking
- Types of Session Hijacking
- Session Hijacking in OSI model
- Application Level Session Hijacking
- Network Level Session Hijacking
- TCP/IP Hijacking
- Session Hijacking tools
- Countermeasures
- IPSec Architecture
- Penetration testing
Module 12:
Hacking Web-servers
Through this
attack we can deface a website, tamper a data, compromise user account, etc.
This module covers:
- Open Source Webserver Architecture
- IIS Webserver Architecture
- Why Web Servers are compromised?
- Impact of Web Server Attacks
- Web Application Attacks
- Web Server Attack Methodology
- Web Server Attack Tools
- Countermeasures
- How to defend against web server attacks?
- What is Patch Management?
- Patch Management Tools
- Web server security tools
- Penetration testing
Module 13:
Hacking Web Applications
This is the
longest module and it takes time and patience to complete this topic. We know
that web application provide an interface between the user and the web server
through web pages. Now in this attack we are attacking the web application and
try to gain active or passive access to them. This includes XSS, SQLi, CSRF,
RFI, LFI etc. This module covers:
- Web Application introduction and its componenets
- How Web Application Work?
- Web Application Architecture
- Unvalidated Input
- Parameter/ Form Tampering
- Injection Flaws
- Hidden Field Manipulation Attack
- XSS Attacks
- Web Services Attacks
- Hacking Methodology
- Web Application Hacking Tools
- Countermeasure
- Web application Security tools
- Web application Firewalls
- Web application Pen testing
Module 14: SQL
injection
It is one of
the most common website vulnerability and most of the websites still includes
this vulnerability. It is a flaw in web application and not in the database or
the web server issue. Even after a lot of digging, most of the programmer are
still not aware about this vulnerability. This module covers:
- Introduction to SQL Injection
- Threats of SQLi Attacks and Examples
- SQLi Detection
- SQLi Error Messages
- SQLi Black Box Pen testing
- Types of SQLi
- Simple SQLi Attack
- Union Based SQLi
- Error-based SQLi
- Blind SQLi
- Advanced SQLi
- SQLi Tools
- Signature Evasion Techniques
- Countermeasures
- SQLi Detection tools
Module 15:
Hacking Wireless Networks
In the most
common words we can say hacking Wi-fi. Any network which uses the wireless
networks are on the target of this attack. This module covers:
- Wireless Networks
- Types of Wireless Networks
- Wi-Fi Authentication Modes
- Types of Wireless Encryption
- WEP Encryption
- WPA/WPA2
- Wireless Threats
- Wireless Hacking Methodology
- Wireless Hacking Tools
- Bluetooth Hacking
- Countermeasures
- Wi-Fi Security Tools
- Penetration Testing
Module 16:
Evading IDS, Firewalls and Honeypots
Intrusion
Detection Systems commonly called as IDS gathers and analyze the information
from and within a computer or network, to identify the possible violation of
the security policy, which includes the unauthorized access and its misuse.
Firewall are
the hardware or software or the combination of both and are used to prevent the
unauthorized access to the network or computer.
Honeypot is an
information system resource that is expressly set up to attract and trap people
who attempt to penetrate an organization’s network. This module covers:
- Intrusion Detection Systems (IDS)
- Ways to Detect an Intrusion
- Types if IDS
- Firewall and its types
- Firewall Identification Techniques
- Honeypot
- Types of Honeypot
- How to set up a Honeypot?
- IDS, Firewall and Honeypot System
- Evading IDS
- Evading Firewall
- Detecting Honeypots
- Firewall Evading tools
- Countermeasures
- Penetration testing
Module 17:
Buffer Overflow
A generic
buffer overflow occurs when a buffer that has been allocated a specific storage
space has more data copied to it than it can handle. This module covers:
- Buffer Overflows (BoF)
- Stack-Based Buffer Overflow
- Heap-Based Buffer Overflow
- Stack Operation
- Buffer Overflow Steps
- Attacking a Real Program
- Smashing the Stack and its examples
- How to mutate a buffer overflow exploit
- Identifying Buffer Overflows
- Testing for Heap Overflow Conditions: heap.exe
- Steps for testing of Stack Overflow in OllyDbg Debugger
- BoF Detection Tools
- Countermeasure and its tools
- Pentesting
Module 18:
Cryptography
Cryptography is
the conversion of data into a scrambles code that is decrypted and sent across
a private or public network. This module covers:
- Cryptography and its types
- Ciphers
- Advanced Encryption Standard (AES)
- RC4, RC5, RC6 Algorithyms
- RSA (Rivest Shamir Adleman)
- Message Digest Function: MD5
- Secure Hashing Algorithm (SHA)
- Cryptography Tools
- Public Key Infrastructure (PKI)
- Digital Signature
- SSL (Secure Sockets Layer)
- Disk Encryption
- Disk Encryption Tools
- Cryptography attack
- Cryptanalysis Tools
Module 19:
Penetration Testing
Penetration
testing are methods that attackers use to gain unauthorized access to an
organization’s networked systems and then compromise with them. This module includes:
- Penetration Testing (PT)
- Security Assessments
- Risk Management
- Automated Testing
- Manual Testing
- Enumerating Devices
- DoS Emulation
- Hacker Shield
- Pentest using various Devices
- VigilENT
- Web Inspect
- Tools
So these were
the overview of the topics to be covered in the CEH course and we also need to
practice this in regular basis.
Author: Unpredictable
If you have any query then feel free to comment below or for more info mail us @ prashantsavior@gmail.com. Don't forget to like our Facebook page and stay updated.
