Ethical Hacking

1. Introduction to the term Networking
2. Types of Network
3. OSI Model
4. Client/Server Configuration
5. Topologies
6. Media (Guided Media)
7. IP Address (IPv4, IPv6)
8. VLSM, CIDR, Subnetting (Network/Host)
9. Devices
10. Protocols
11. TCP/IP Applications and Services

1. Introduction of Linux
2. History of Linux & Unix
3. Installation of RHEL-6 & 7
4. Directory Structure
5. Basic Commands
6. VI Editor
7. Permissions
8. Users & Groups
9. I/O Redirectors
10. Hardlink and Softlink
11. Compression/Decompression, Backup and Scheduling Tasks

1. Filter commands
2. Finding and processing files
3. Process commands
4. Analyzing logs
5. Exploring virtual file system (Proc)

1. The module briefs about information security, information security threats and attack vectors.
2. Discusses various hacking concepts, type and phases.
3. Addresses the pre-requisites to become an ethical hacker and also the scope and limitations of ethical hacking
4. Discusses various information security controls such as Information Assurance (IA), Defense-in-path, security policies, physical security, risk management, threat modelling, incident management, AI/ML, Etc.
5. Addresses the penetration testing process and security testing methodology
6. Discusses various information security acts and laws

1. Discusses footprinting terminologies.
2. Briefs on the footprinting methodologies such as footprinting through search engines, web services, social networking sites, social engineering, website footprinting, Email footprinting, competitive intelligence gathering, whois footprinting, DNS footprinting, etc.
3. Provides an assessment of various footprinting tools used to collect information regarding a system or network.
4. Discusses various footprinting countermeasures to defend against footprinting attacts.
5. Describes various penetration testing steps involved in footprinting.

1. Discusses network scanning concepts
2. The module briefs on scanning methodology used to identify the hosts, ports, and services in a network that includes:
3. Checking for live systems and ports using various scanning techniques
4. Identifying services using various scanning techniques
5. IDS/firewall evasion techniques
6. Banner grabbing/OS fingerprinting
7. Drawing network diagrams of the vulnerable hosts
8. Provides an assessment of various scanning tools used to collect information regarding hosts, ports, and services in a network
9. Discusses various IP spoofing detection techniques
10. Discusses various penetration testing steps used to scan the network

1. This module explains the process of extracting user names, machine names, network resources, shares, and services from a system
2. Describes the techniques for enumeration such as NetBIOS Enumeration, SNMP enumeration, LDAP enumeration, NTP enumeration, SMTP enumeration, DNS enumeration, IPsec enumeration, VoIP enumeration, RPC enumeration, and Unix/Linux user enumeration
3. Lists the enumeration tools that can be used to extract the data
4. Discusses various enumeration countermeasures to defend against enumeration attacks
5. Assesses various penetration testing steps used to extract the data from a system

1. Discusses vulnerability assessment concepts
2. Briefs the working of vulnerability scanning solutions and criteria for choosing those tools
3. Describes the importance of vulnerability scoring systems in vulnerability assessment
4. Lists various tools used to perform vulnerability assessment
5. Discusses how to generate and analyze vulnerability assessment reports

1. Describes the CEH system hacking process which is classified into three stages: gaining access (by cracking passwords and escalating privileges), maintaining access (executing applications and hiding files), and clearing logs (covering tracks)
2. Explains the hacking tools (keyloggers, spywares, and rootkits, etc.) that aid the hacking process
3. Discusses various steganography techniques for hiding a secret message
4. Explains various steganalysis methods and steganography detection tools
5. Presents the countermeasures that can be applied at every stage to prevent an attack on the system
6. Discusses various penetration testing steps

1. Discusses various malware and malware propagation techniques
2. Discusses Trojans and viruses, their types, and how they infect files/systems
3. Lists some of the latest Trojans that are used to infect a system
4. Discusses worms that can compromise a business or system’s security
5. Explains the static and dynanic malware analysis process
6. Briefs on the various methods of virus detection
7. Discusses various countermeasures to defend against malware attacks
8. Lists anti-malware tools
9. Assesses various malware penetration testing steps

Topics to be covered:                                                                    

1. Briefs about the basic concepts of sniffing network and various types of sniffing
2. Discusses various sniffing techniques such as MAC attack, DHCP attack, ARP poisoning, DNS poisoning, etc.
3. Discusses on how to defend against various sniffing attacks
4. Features various sniffing tools and explains how an attacker hacks a network using them
5. Lists a number of countermeasures to defend against sniffing
6. Explains various sniffing detection methods and tools
7. Discusses various penetration testing steps
   

Topics to be covered:                                                                    

1. Introduces social engineering concepts and various attack phases
2. Describes the different types of social engineering with examples
3. Explains various types of insider threats
4. Explains in detail how impersonation on social engineering sites is carried out
5. Briefs how attackers obtain and exploit personally identifiable information and authenticate themselves, in order to impersonate victim
6. Lists various social engineering, insider threats, and identity theft countermeasures
7. Lists anti-phishing tools to detect phishing emails and websites
8. Tabulates common social engineering tactics and proposes combat strategies to prevent such attacks
9. Talks about social engineering penetration testing
   

Topics to be covered:                                                                    

1. This module explains DoS/DDoS attacks, the classification of DoS/DDoS attacks, and various attack techniques
2. Discusses Botnets, the types of bots, and how they infect the system
3. Demonstrates various tools to perform DoS and DDoS attacks
4. Discusses various techniques to detect, prevent, and mitigate DoS/DDoS attacks
5. Briefs about various post-attack forensic methods
6. Explains various techniques to defend against botnets
7. Lists various DoS/DDoS protection tools
8. Explains countermeasures to prevent DoS/DDoS attacks and pen testing steps
   

1. This module explains session hijacking concepts
2. Discusses about network and application level session hijacking
3. Explains various session hijacking tools
4. Explains various session hijacking detection methods and tools
5. Explains countermeasures to prevent session hijacking attacks
6. Discusses various approaches vulnerable to session hijacking and their preventative solutions
7. Discusses various penetration testing steps involved in session hijacking

1. This module gives an introduction to IDS, firewall and honeypot concepts and types
2. Demonstrates various IDS, firewall and honeypot solutions
3. Describes various IDS and firewall evasion techniques
4. Explains various techniques to detect and defeat honeypots
5. Lists various IDS/firewall evasion tools and honeypot detection tools
6. Discusses the countermeasures to defend against IDS/firewall evasion
7. Discusses various penetration testing steps involved in in firewall/IDS penetration testing

1. Explains open source web server and IIS architecture
2. Discusses various reasons why web servers are compromised
3. Demonstrates various key web server attack techniques and tools
4. Discusses about web server attack methodology and tools
5. Discusses various methods to detect web server hacking attempts
6. Explains countermeasures to prevent web server attacks
7. Explains what is patch management and associated concepts
8. Lists various web server security tools
9. Discusses various penetration testing steps involved in web server pen testing

1. This module gives an introduction to web application architecture and demonstrates how web applications work?
2. Lists and explains various web application threats and attacks
3. Explains web application hacking methodology
4. Demonstrates various web application hacking tools
5. Discusses countermeasures to defend against web application attacks
6. Demonstrates various web application security tools
7. Discusses various penetration testing steps and tools involved in web application pen testing

1. This module gives an introduction to SQL Injection and threats from SQL injection attacks
2. Explains various types of SQL injection attacks with examples
3. Explains SQL injection methodology
4. Demonstrates various SQL injection and detection tools
5. Explains various evasion techniques
6. Explains countermeasures to prevent SQL injection attacks

1. The module gives an introduction to wireless terminologies, types, standards, etc.
2. Discusses the types of wireless encryption and their working
3. Lists and explains various wireless threats
4. Describes wireless hacking methodology
5. Demonstrates various wireless hacking tools
6. Discusses about Bluetooth hacking, threats, and Bluetooth hacking tools
7. Discusses how to defend against wireless attacks
8. Illustrates various wireless security tools
9. Discusses various penetration testing steps and tools involved in wireless penetration testing

1. This module discusses mobile platform attack vectors in detail and explores app sandboxing issues
2. Discusses Android OS architecture briefly and demonstrates hacking android OS using various tools
3. Illustrates working of various Android Trojans and guidelines for securing Android devices
4. Gives a brief knowledge on jailbreaking iOS, its types, techniques and tools required for jailbreaking
5. Illustrates various iOS Trojans and guidelines for securing iOS devices
6. Discusses about different mobile spyware
7. Explains about mobile device management and solutions for mobile device management
8. Lists guidelines for BYOD security
9. Provides brief knowledge on mobile security guidelines and lists various mobile security tools
10. Discusses various penetration testing steps involved in pen testing for Android phones and iPhones

1. This module gives an introduction to IoT concepts
2. Briefs about various IoT challenges and security problems
3. Discusses about various IoT threats and attack surface areas
4. Tabulates various IoT attacks in different sectors
5. Discusses the IoT hacking methodology and various IoT hacking tools
6. Discusses various countermeasures to prevent IoT hacking
7. Explains security considerations for IoT framework
8. Lists various IoT security tools
9. Discusses various steps involved in IoT pen testing

1. Briefs about the basic concepts of cloud computing and various types of cloud computing services
2. Explains the importance of virtualization in cloud computing
3. Lists and explains various threats of cloud computing
4. Discusses various cloud computing attacks
5. Briefs about various cloud computing security considerations
6. Discusses best practices for securing cloud
7. Discusses various cloud security tools
8. Explains various key considerations for pen testing in the cloud
9. Discusses various steps involved in cloud penetration testing

1. This module gives an introduction to cryptography concepts
2. Discusses the types of cryptography and their working process
3. Discusses about ciphers and its types
4. Explains various encryption algorithms with examples
5. Discusses various hashing algorithms and lists various hash calculators
6. Lists and features various cryptography tools
7. Explains Public Key Infrastructure (PKI) and its components
8. Discusses email encryption, disk encryption, and cryptography attacks
9. Briefs various cryptanalysis methods and lists various cryptanalysis tools
10. Explains how to defend against cryptographic attacks