EC-Council CEH v13 Study Roadmap

Modules 1-2: Information Security fundamentals, Ethical Hacking methodology, Cyber Kill Chain

Modules 3-4: Footprinting & Reconnaissance (OSINT, DNS, Whois, social media recon)

Modules 5-6: Scanning Networks (Nmap, host discovery, port scanning, OS fingerprinting)

Module 7: Enumeration (NetBIOS, SNMP, LDAP, NTP, DNS zone transfers)

Module 8: Vulnerability Analysis (Nessus, OpenVAS, vulnerability scoring, CVE databases)

Modules 9-10: System Hacking (Password attacks, privilege escalation, rootkits, steganography)

Modules 11-12: Malware Threats & Sniffing (Trojans, viruses, Wireshark, ARP poisoning)

Modules 13-14: Social Engineering & DoS (Phishing, pretexting, DDoS tools, botnets)

Modules 15-16: Session Hijacking & IDS/Firewall Evasion (Token theft, tunneling, fragmentation)

Modules 17-18: Web Servers & Web Apps (Directory traversal, OWASP Top 10, XSS, CSRF)

Module 19: SQL Injection (Union-based, blind, time-based, error-based, sqlmap)

Modules 20-21: Wireless & Mobile Hacking (WPA cracking, evil twin, Android/iOS exploits)

Modules 22-23: IoT/OT & Cloud (SCADA, MQTT, AWS/Azure attacks, container security, cryptography)

Full Review: Practice exams, Weak areas, Lab exercises, Exam logistics