EC-Council – Certified Ethical Hacker

The CEH or Certified Ethical Hacker is one of the most prestigious courses in the field of hacking and cybersecurity offered by the EC-Council Institute. In 2024, version 13 of this course was released, which has significant changes and updates over the previous versions (versions 12 and 11). In CEH v13, more emphasis has been placed on emerging topics. Changes in the topics and educational content of the topics related to Industrial Systems Security (SCADA/ICS), 5G Network Security, and DevOps Security have become completer and more comprehensive, and this version has also updated the hacking of GSM and mobile networks and paid more attention to Supply Chain Attacks and Zero-Day Exploits.

Tools used in CEH v13

The CEH v13 course uses a suite of advanced and specialized tools for ethical hacking and penetration testing. These tools are divided into a few general categories, which include tools for detection, scanning, exploitation, cryptography, network traffic analysis, social engineering, and many others. Here are the important tools for the CEH v13 course, along with the relevant category:

1. Reconnaissance and Footprinting Tools

These tools are used to gather information in the early stages of attacks.

Nmap: A tool to scan ports and identify devices active on the network
Maltego: Public and Private Data Identification and Analysis Tool
Recon-ng: A Framework for Gathering Information from Different Sources
theHarvester: A tool for collecting email, domain names, IPs, and network infrastructure

2. Scanning and Vulnerability Assessment Tools

These tools are used to identify vulnerabilities in systems and networks.

Nessus: Vulnerability Detection Tool in Systems and Networks
OpenVAS: A Framework for Scanning Security Vulnerabilities
Nikto: Web Server Scanner to Identify Web Application Vulnerabilities
Netcat: A tool for scanning and connecting networks to identify ports and open connections

3. Exploitation Tools

These tools are used to penetrate systems and exploit vulnerabilities.

Metasploit: A Framework for Exploiting Vulnerabilities and Intrusions into Systems
SQLMap: Penetration Testing Tool for Detecting and Exploiting SQL Injection Attacks
BeEF (Browser Exploitation Framework): A tool for exploiting browsers
ExploitDB: A Database for Searching for Registered Vulnerabilities

4. Password Cracking and Cryptography Tools

These tools are used to crack passwords and analyze cryptographic algorithms.

John the Ripper: Password Cracking Tool Using Dictionary Attacks and Brute Force
Hashcat: The Fastest Hash Cracking Tool Using GPUs
Hydra: Brut Force Attack Tool on Various Network Services
Cain & Abel: Tool for Cracking Passwords, Recording Network Traffic, and Bruteforce Attacks

5. Sniffing and Traffic Analysis Tools

These tools are used to analyze network packets and listen to information.

Wireshark: Network Packet Analysis and Traffic Checking Tool on Wired and Wireless Networks
Tcpdump: A Tool for Capturing and Analyzing Network Packets
Ettercap: A tool to perform man-in-the-middle eavesdropping attacks on networks
Kismet: Wireless Network Traffic Detection and Eavesdropping Tool

These tools are used for deception-based attacks and human interaction.

Social-Engineer Toolkit (SET): A set of tools for executing social engineering attacks
Phishing Frameworks: Tools Like Gophish to Run Phishing Attacks
Maltego: In addition to collecting information, it is also used to analyze social relationships

7. Web Application Hacking Tools

Web hacking tools to identify and exploit vulnerabilities in web applications.

Burp Suite: A Framework for Testing the Security of Web Applications
OWASP ZAP: Web Application Penetration Analysis and Testing Tool
W3af: Web Application Vulnerability Detection and Exploitation Tool
DirBuster: Hidden Web Directories Search & Find Tool

8. Wireless Hacking Tools

These tools are used to infiltrate wireless networks and identify their vulnerabilities.

Aircrack-ng: A Collection of Tools for Attacks on Wireless Networks
Kismet: Wireless Network Detection and Wireless Traffic Analysis Tool
Fern WiFi Cracker: Wireless Network Penetration Test Tool
Reaver: Exploiting WPS Vulnerabilities in Wi-Fi Networks

9. Malware Analysis Tools

These tools are used to detect and analyze malware.

Cuckoo Sandbox: A Tool for Executing Malware in a Simulated Environment and Analyzing Their Behavior
Remnux: Linux Distribution for Malware Analysis
Ghidra: Reverse Engineering and Malware Analysis Tool
OllyDbg: Debugger for Analyzing Windows Applications

10. Cloud Security Tools

These tools are used to analyze and identify vulnerabilities in cloud environments.

ScoutSuite: Cloud Services Security Settings Checker Tool
Prowler: Vulnerability Detection Tool and Insecure Settings on AWS
CloudSploit: Cloud Services Security Analysis Tool

11. Mobile Security Tools

Tools related to the identification and analysis of mobile vulnerabilities and mobile operating systems.

MobSF (Mobile Security Framework): A tool for analyzing the security of mobile applications
Drozer: A Framework for Identifying Vulnerabilities in Android Apps
Frida: Mobile App Reverse Analysis and Engineering Tool
APKTool: A tool to analyze APK files and reverse engineer Android apps

12. IoT Security Tools

Tools used to identify and analyze the security of IoT devices.

IoT Inspector: IoT Device Security Analysis Tool
Firmware Analysis Toolkit: Firmware Analysis Tool for IoT Devices
JTAGulator: A Tool for Identifying and Analyzing IoT Hardware Debug Ports

13. Incident Management and Reporting Tools

These tools are used to manage incidents and prepare security reports.

Splunk: Log Analysis and Security Event Management Tool
ELK Stack: A suite of tools for collecting and analyzing data and security logs
Graylog: Log Management and Analysis Tool for Identifying Security Events

EC-Council – Certified Ethical Hacker – CEH v13
download link

Size: 9.5 GB

Download – eBooks – Part 1
Download – eBooks – Part 2

Download – Prerequisites – Part I
Download – Prerequisites – Part Two

Download – LAB – Part 1
Download – LAB – Part 2
Download – LAB – Part 3
Download – LAB – Part 4
Download – LAB – Part 5
Download – LAB – Part 6
Download – LAB – Part 7

The EC-Council Certified Ethical Hacker (CEH) v13 course is designed to build expertise in ethical hacking methodologies, focusing on key areas like network security, threat intelligence, vulnerability assessment, and hacking techniques. With hands-on labs and real-world scenarios, the course prepares cybersecurity professionals to think like hackers, enabling them to protect networks effectively. The updated v13 covers critical areas such as malware threats, cloud security, and IoT. Ideal for cybersecurity roles, CEH v13 is globally recognized and equips participants with essential tools for safeguarding information systems.

Syllabus
Module 1: Introduction to Ethical Hacking
Module 2: Foot Printing and Reconnaissance
Module 3: Scanning Networks
Module 4: Enumeration
Module 5: Vulnerability Analysis
Module 6: System Hacking
Module 7: Malware Threats
Module 8: Sniffing
Module 9: Social Engineering
Module 10: Denial-of-Service
Module 11: Session Hijacking
Module 12: Evading IDS, Firewalls, and Honeypots
Module 13: Hacking Web Servers
Module 14: Hacking Web Applications
Module 15: SQL Injection
Module 16: Hacking Wireless Networks
Module 17: Hacking Mobile Platforms
Module 18: IoT and OT Hacking
Module 19: Cloud Computing
Module 20: Cryptography