← All Certifications
EC-Council

EC-Council CEH v13 Certification

CEH · 20 modules

Last updated: March 31, 2026

Exam Syllabus & Domains

The EC-Council CEH v13 certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 21%

Reconnaissance & Scanning

  • 1.1 Understand information security and ethical hacking fundamentals
  • 1.2 Perform footprinting and reconnaissance using passive and active techniques
  • 1.3 Conduct network scanning to identify live hosts, ports, and services
  • 1.4 Enumerate systems to extract usernames, shares, and network resources
OSINT ToolsDNS FootprintingWhois LookupsNmap ScanningTCP/UDP ScanningBanner GrabbingSNMP EnumerationLDAP EnumerationNetBIOS EnumerationVulnerability Scanners
Domain 2 22%

System & Network Attacks

  • 2.1 Analyze vulnerabilities using automated tools and manual techniques
  • 2.2 Exploit system vulnerabilities to gain and maintain access
  • 2.3 Understand malware threats including trojans, viruses, and worms
  • 2.4 Perform sniffing attacks and analyze network traffic
Password CrackingPrivilege EscalationRootkitsTrojansVirus TypesPacket SniffingARP PoisoningMAC FloodingSession HijackingDoS/DDoS Attacks
Domain 3 20%

Web Application Attacks

  • 3.1 Apply social engineering techniques and countermeasures
  • 3.2 Exploit web server vulnerabilities and misconfigurations
  • 3.3 Attack web applications using OWASP Top 10 techniques
  • 3.4 Perform SQL injection attacks against database-driven applications
Social EngineeringPhishing AttacksWeb Server ExploitsOWASP Top 10SQL InjectionXSS AttacksCSRF AttacksParameter TamperingDirectory TraversalCommand Injection
Domain 4 20%

Wireless/Mobile/IoT/Cloud

  • 4.1 Hack wireless networks and bypass wireless encryption
  • 4.2 Exploit mobile platform vulnerabilities on Android and iOS
  • 4.3 Attack IoT and OT devices and protocols
  • 4.4 Identify cloud computing threats and attack vectors
WPA/WPA2/WPA3 CrackingEvil Twin AttacksMobile MalwareAndroid RootingiOS JailbreakingIoT ProtocolsSCADA/ICS AttacksCloud EnumerationS3 Bucket ExploitsContainer Escapes
Domain 5 17%

Cryptography & Defense

  • 5.1 Evade IDS, firewalls, and honeypots using evasion techniques
  • 5.2 Apply cryptographic concepts and attack cryptographic implementations
  • 5.3 Understand defensive security measures and countermeasures
  • 5.4 Perform vulnerability assessment and penetration testing methodology
IDS EvasionFirewall BypassingHoneypot DetectionSymmetric EncryptionAsymmetric EncryptionPKI/CertificatesHash FunctionsCryptanalysisSteganographyVPN Protocols

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Reconnaissance & Scanning
21%
D2 System & Network Attacks
22%
D3 Web Application Attacks
20%
D4 Wireless/Mobile/IoT/Cloud
20%
D5 Cryptography & Defense
17%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the EC-Council CEH v13 Practice Quiz

Related Comparisons

Not sure if EC-Council CEH v13 is the right choice? Compare it with similar certifications:

CEH vs PenTest+ CySA+ vs CEH OSCP vs CEH

Get the EC-Council CEH v13 Study Planner

Fillable PDF with 14-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your EC-Council CEH v13 certification training:

Frequently Asked Questions

What is the EC-Council CEH v13 certification?

The EC-Council CEH v13 (CEH) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the EC-Council CEH v13 certification syllabus cover?

The EC-Council CEH v13 exam syllabus covers 20 modules. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for EC-Council CEH v13?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for EC-Council CEH v13?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.