CEH: Certified Ethical Hacking v6.1 Course Description
Computers around the world are systematically being victimized by rampant hacking. This hacking is not only widespread, but is being executed so flawlessly that the attackers compromise a system, steal everything of value and completely erase their tracks within 20 minutes.
The goal of the ethical hacker is to help the organization take preemptive measures against malicious attacks by attacking the system himself; all the while staying within legal limits. This philosophy stems from the proven practice of trying to catch a thief, by thinking like a thief. As technology advances and organization depend on technology increasingly, information assets have evolved into critical components of survival.
The CEH Program certifies individuals in the specific network security discipline of Ethical Hacking from a vendor-neutral perspective. The Certified Ethical Hacker certification will fortify the application knowledge of security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker.
Intended Audience for the CEH: Certified Ethical Hacking v6.1 Course- This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.
Training Packages & Career Tracks that include the CEH: Certified Ethical Hacking v6.1 Course
CEH: Certified Ethical Hacking v6.1 Course Objectives
- Students will begin by understanding perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed.
- Students then learn how intruders escalate intruders escalate privileges and what steps can be taken to secure a system.
- Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.
The CEH: Certified Ethical Hacking v6.1 Course prepare students for the following Exams- 312-50 : Certified Ethical Hacker
CEH: Certified Ethical Hacking v6.1 Course Outline
- Module 1: Introduction to Ethical Hacking
- Problem Definition -Why Security?
- Essential Terminologies
- Elements of Security
- The Security, Functionality and Ease of Use Triangle
- Effect on Business
- Case Study
- What does a Malicious Hacker do?
- Types of Hacker Attacks
- Hacktivism
- Hacker Classes
- Security News: Suicide Hacker
- Ethical Hacker Classes
- What do Ethical Hackers do
- Can Hacking be Ethical
- How to become an Ethical Hacker
- Skill Profile of an Ethical Hacker
- What is Vulnerability Research
- How to Conduct Ethical Hacking
- How Do They Go About It
- Approaches to Ethical Hacking
- Ethical Hacking Testing
- Ethical Hacking Deliverables
- Computer Crimes and Implications
- Module 2: Hacking Laws
- U.S. Securely Protect Yourself Against Cyber Trespass Act (SPY ACT)
- Legal Perspective (U.S. Federal Law)
- United Kingdom's Cyber Laws
- United Kingdom: Police and Justice Act 2006
- European Laws
- Japan's Cyber Laws
- Australia: The Cybercrime Act 2001
- Indian Law: THE INFORMTION TECHNOLOGY ACT
- Argentina Laws
- Germany's Cyber Laws
- Singapore's Cyber Laws
- Belgium Law
- Brazilian Laws
- Canadian Laws
- France Laws
- German Laws
- Italian Laws
- MALAYSIA: THE COMPUTER CRIMES ACT 1997
- HONGKONG: TELECOMMUNICATIONS
- Korea: ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC.
- Greece Laws
- Denmark Laws
- Netherlands Laws
- Norway
- ORDINANCE
- Mexico
- SWITZERLAND
- Module 3: Footprinting
- Revisiting Reconnaissance
- Defining Footprinting
- Why is Footprinting Necessary
- Areas and Information which Attackers Seek
- Information Gathering Methodology
- Footprinting Tools
- E-Mail Spiders
- How to Create Fake Website
- Real and Fake Website
- Tool: Reamweaver
- Mirrored Fake Website
- Faking Websites using Man-in-the-Middle Phishing Kit
- Benefits to Fraudster
- Steps to Perform Footprinting
- Module 4: Google Hacking
- What is Google hacking
- What a hacker can do with vulnerable site
- Anonymity with Caches
- Using Google as a Proxy Server
- Directory Listings
- Going Out on a Limb: Traversal Techniques
- Extension Walking
- Site Operator
- intitle:index.of
- error / warning
- login / logon
- username / userid / employee.ID / "your username is"
- password / passcode / "your password is"
- admin / administrator
- ext:html ext:htm ext:shtml ext:asp ext:php
- inurl:temp / inurl:tmp / inurl:backup / inurl:bak
- intranet / help.desk
- Locating Public Exploit Sites
- Locating Vulnerable Targets
- Directory Listings
- Web Server Software Error Messages
- Application Software Error Messages
- Default Pages
- Searching for Passwords
- Google Hacking Database (GHDB)
- SiteDigger Tool
- Gooscan
- Goolink Scanner
- Goolag Scanner
- Tool: Google Hacks
- Google Hack Honeypot
- Google Protocol
- Google Cartography
- Module 5: Scanning
- Scanning: Definition
- Types of Scanning
- Objectives of Scanning
- CEH Scanning Methodology
- War Dialer Technique
- Banner Grabbing
- Vulnerability Scanning
- Draw Network Diagrams of Vulnerable Hosts
- Preparing Proxies
- Scanning Countermeasures
- Tool: SentryPC
- Module 6: Enumeration
- Overview of System Hacking Cycle
- What is Enumeration?
- Techniques for Enumeration
- NetBIOS Null Sessions
- PS Tools
- Simple Network Management Protocol (SNMP) Enumeration
- LDAP enumeration
- NTP enumeration
- SMTP enumeration
- Web enumeration
- Winfingerprint
- How To Enumerate Web Application Directories in IIS Using DirectoryServices
- IP Tools Scanner
- Enumerate Systems Using Default Password
- Tools
- Steps to Perform Enumeration
- Module 7: System Hacking
- Part 1: Cracking Password
- Part2-Escalating Privileges
- Part3-Executing applications
- Part4-Hiding files
- Part5-Covering Tracks
- Module 8: Trojans and Backdoors
- What is a Trojan?
- Indications of a Trojan Attack
- Ports Used by Trojans
- Classic Trojans
- Stealth Trojans
- Reverse Connecting Trojans
- Miscellaneous Trojans
- How to Detect Trojans?
- Anti-Trojan Software
- Evading Anti-Virus Techniques
- Sample Code for Trojan Client/Server
- Evading Anti-Trojan/Anti-Virus using Stealth Tools
- Backdoor Countermeasures
- Tripwire
- System File Verification
- MD5 Checksum.exe
- Microsoft Windows Defender
- How to Avoid a Trojan Infection
- Module 9: Viruses and Worms
- Virus History
- Characteristics of Virus
- Working of Virus
- Why people create Computer Viruses
- Symptoms of a Virus-like Attack
- Virus Hoaxes
- Chain Letters
- Worms
- How is a Worm Different from a Virus
- Indications of a Virus Attack
- Virus Damage
- Stages of Virus Life
- Types of Virus
- Famous Viruses and Worms
- Latest Viruses
- Writing Virus Program
- Virus Detection Methods
- Anti-Virus Software
- Popular Anti-Virus Packages
- Virus Databases
- Snopes.com
- Module 10: Sniffers
- Definition: Sniffing
- Types of Sniffing
- Protocols Vulnerable to Sniffing
- Passive Sniffing
- Active Sniffing
- Switched Port Analyzer (SPAN)
- SPAN Port
- Lawful Intercept
- Benefits of Lawful Intercept
- Network Components Used for Lawful Intercept
- Ready to Sniff?
- Tool: Network View -- Scans the Network for Devices
- The Dude Sniffer
- Look@LAN
- Wireshark
- Display Filters in Wireshark
- Following the TCP Stream in Wireshark
- Pilot
- Tcpdump
- Tcpdump Commands
- Features of Sniffing Tools
- What is Address Resolution Protocol (ARP)
- ARP Spoofing Attack
- How Does ARP Spoofing Work
- ARP Poisoning
- Threats of ARP Poisoning
- MAC Flooding
- Mac Duplicating
- Mac Duplicating Attack
- Tools for ARP Spoofing
- DHCP Starvation Attack
- DNS Poisoning Techniques
- Tools for MAC Flooding
- Sniffing Tools
- Linux Sniffing Tools (dsniff package)
- Hardware Protocol Analyzers
- How to Detect Sniffing
- Module 11: Social Engineering
- What is Social Engineering?
- Human Weakness
- "Rebecca" and "Jessica"
- Office Workers
- Types of Social Engineering
- Social Engineering Threats and Defenses
- Factors that make Companies Vulnerable to Attacks
- Why is Social Engineering Effective
- Warning Signs of an Attack
- Tool: Netcraft Anti-Phishing Toolbar
- Phases in a Social Engineering Attack
- Behaviors Vulnerable to Attacks
- Impact on the Organization
- Countermeasures
- Policies and Procedures
- Security Policies - Checklist
- Impersonating Orkut, Facebook, MySpace
- Orkut
- Impersonating on Orkut
- MW.Orc worm
- Facebook
- Impersonating on Facebook
- MySpace
- Impersonating on MySpace
- How to Steal Identity
- Comparison
- Original
- Identity Theft
- http://www.consumer.gov/idtheft/
- Module 12: Phishing
- Phishing
- Introduction
- Reasons for Successful Phishing
- Phishing Methods
- Process of Phishing
- Types of Phishing Attacks
- Phishing Statistics: March 2008
- Anti-Phishing
- Anti-Phishing Tools
- Module 13: Hacking Email Accounts
- Introduction
- Vulnerabilities
- Email Hacking Tools
- Securing Email Accounts
- Module 14: Denial-of-Service
- Real World Scenario of DoS Attacks
- What are Denial-of-Service Attacks
- Goal of DoS
- Impact and the Modes of Attack
- Types of Attacks
- DoS Attack Classification
- Bot (Derived from the Word RoBOT)
- Botnets
- Uses of Botnets
- Types of Bots
- How Do They Infect? Analysis Of Agabot
- How Do They Infect
- Tool: Nuclear Bot
- What is DDoS Attack
- Characteristics of DDoS Attacks
- Is DDoS Unstoppable?
- Agent Handler Model
- DDoS IRC based Model
- DDoS Attack Taxonomy
- Amplification Attack
- Reflective DNS Attacks
- Reflective DNS Attacks Tool: ihateperl.pl
- DDoS Tools
- How to Conduct a DDoS Attack
- The Reflected DoS Attacks
- Reflection of the Exploit
- Countermeasures for Reflected DoS
- DDoS Countermeasures
- Taxonomy of DDoS Countermeasures
- Preventing Secondary Victims
- Detect and Neutralize Handlers
- Detect Potential Attacks
- DoSHTTP Tool
- Mitigate or Stop the Effects of DDoS Attacks
- Deflect Attacks
- Post-attack Forensics
- Packet Traceback
- Module 15: Session Hijacking
- What is Session Hijacking?
- Understanding Session Hijacking
- Spoofing v Hijacking
- Steps in Session Hijacking
- Types of Session Hijacking
- Session Hijacking Levels
- Network Level Hijacking
- The 3-Way Handshake
- TCP Concepts 3-Way Handshake
- Sequence Numbers
- Sequence Number Prediction
- TCP/IP hijacking
- IP Spoofing: Source Routed Packets
- RST Hijacking
- Blind Hijacking
- Man in the Middle Attack using Packet Sniffer
- UDP Hijacking
- Application Level Hijacking
- Programs that Performs Session Hacking
- Dangers Posed by Hijacking
- Protecting against Session Hijacking
- Countermeasure: IPSec
- Module 16: Hacking Web Servers
- How Web Servers Work
- How are Web Servers Compromised
- Web Server Defacement
- Apache Vulnerability
- Attacks against IIS
- Unicode
- Hacking Tool
- Tool: Metasploit Framework
- KARMA
- Tool: Immunity CANVAS Professional
- Tool: Core Impact
- Tool: MPack
- Tool: Neosploit
- Patch Management
- Vulnerability Scanners
- Countermeasures
- Increasing Web Server Security
- Web Server Protection Checklist
- Module 17: Web Application Vulnerabilities
- Web Application
- Web application Hacking
- Anatomy of an Attack
- Web Application Threats
- Cross-Site Scripting/XSS Flaws
- SQL Injection
- Command Injection Flaws
- Cookie/Session Poisoning
- Parameter/Form Tampering
- Hidden Field at
- Buffer Overflow
- Directory Traversal/Forceful Browsing
- Cryptographic Interception
- Cookie Snooping
- Authentication Hijacking
- Log Tampering
- Error Message Interception
- Attack Obfuscation
- Platform Exploits
- DMZ Protocol Attacks
- Security Management Exploits
- TCP Fragmentation
- Hacking Tools
- Module 18: Web-Based Password Cracking Techniques
- Authentication
- Password Cracking
- Password Cracking Tools
- Countermeasures
- Module 19: SQL Injection
- SQL Injection: Introduction
- SQL Injection Tools
- Blind SQL Injection
- SQL Injection Countermeasures
- SQL Injection Blocking Tool: SQL Block
- Acunetix Web Vulnerability Scanner
- Module 20: Hacking Wireless Networks
- Introduction to Wireless Networking
- Wireless Standards
- Wireless Concepts
- Wireless Devices
- WEP
- WPA
- TKIP and LEAP
- Hacking Methods
- Cracking WEP
- Rogue Access Point
- Scanning Tools
- Sniffing Tools
- Wireless Security Tools
- Module 21: Physical Security
- Security Facts
- Understanding Physical Security
- Physical Security
- What Is the Need for Physical Security
- Who Is Accountable for Physical Security
- Factors Affecting Physical Security
- Physical Security Checklist
- Information Security
- EPS (Electronic Physical Security)
- Wireless Security
- Laptop Theft Statistics for 2007
- Statistics for Stolen and Recovered Laptops
- Laptop Theft
- Laptop theft: Data Under Loss
- Laptop Security Tools
- Laptop Tracker - XTool Computer Tracker
- Tools to Locate Stolen Laptops
- Stop's Unique, Tamper-proof Patented Plate
- Tool: TrueCrypt
- Laptop Security Countermeasures
- Mantrap
- TEMPEST
- Challenges in Ensuring Physical Security
- Spyware Technologies
- Spying Devices
- Physical Security: Lock Down USB Ports
- Tool: DeviceLock
- Blocking the Use of USB Storage Devices
- Track Stick GPS Tracking Device
- Module 22: Linux Hacking
- Why Linux
- Linux Distributions
- Linux Live CD-ROMs
- Basic Commands of Linux: Files & Directories
- Linux Basic
- Directories in Linux
- Installing, Configuring, and Compiling Linux Kernel
- How to Install a Kernel Patch
- Compiling Programs in Linux
- GCC Commands
- Make Files
- Make Install Command
- Linux Vulnerabilities
- Chrooting
- Why is Linux Hacked
- How to Apply Patches to Vulnerable Programs
- Scanning Networks
- Nmap in Linux
- Scanning Tool: Nessus
- Port Scan Detection Tools
- Password Cracking in Linux: John the Ripper
- Firewall in Linux: IPTables
- IPTables Command
- Basic Linux Operating System Defense
- SARA (Security Auditor's Research Assistant)
- Linux Tool: Netcat
- Linux Tool: tcpdump
- Linux Tool: Snort
- Linux Tool: SAINT
- Linux Tool: Wireshark
- Linux Tool: Abacus Port Sentry
- Linux Tool: DSniff Collection
- Linux Tool: Hping2
- Linux Tool: Sniffit
- Linux Tool: Nemesis
- Linux Tool: LSOF
- Linux Tool: IPTraf
- Linux Tool: LIDS
- Hacking Tool: Hunt
- Tool: TCP Wrappers
- Linux Loadable Kernel Modules
- Hacking Tool: Linux Rootkits
- Rootkits: Knark & Torn
- Rootkits: Tuxit, Adore, Ramen
- Rootkit: Beastkit
- Rootkit Countermeasures
- "chkrootkit" detects the following Rootkits
- Linux Tools: Application Security
- Advanced Intrusion Detection Environment (AIDE)
- Linux Tools: Security Testing Tools
- Linux Tools: Encryption
- Linux Tools: Log and Traffic Monitors
- Linux Security Auditing Tool (LSAT)
- Linux Security Countermeasures
- Steps for Hardening Linux
- Module 23: Evading IDS, Firewalls and Detecting Honey Pots
- Introduction to Intrusion Detection System
- Terminologies
- Intrusion Detection System (IDS)
- Intrusion Prevention System
- What is a Firewall?
- Common Tool for Testing Firewall and IDS
- What is Honeypot?
- Tools to Detect Honeypots
- What to do when hacked
- Module 24: Buffer Overflows
- Buffer Overflow Concepts
- Attacking a Real Program
- NOPs
- How to Mutate a Buffer Overflow Exploit
- Once the Stack is Smashed
- Examples of Buffer Overflow
- Tools
- How to Detect Buffer Overflows in a Program
- Defense Against Buffer Overflows
- Module 25: Cryptography
- Public-key Cryptography
- Working of Encryption
- Digital Signature
- RSA (Rivest Shamir Adleman)
- RC4, RC5, RC6, Blowfish
- Algorithms and Security
- Brute-Force Attack
- RSA Attacks
- Message Digest Functions
- SHA (Secure Hash Algorithm)
- SSL (Secure Sockets Layer)
- What is SSH
- Government Access to Keys (GAK)
- RSA Challenge
- distributed.net
- Code Breaking: Methodologies
- Cryptography Attacks
- Disk Encryption
- Magic Lantern
- WEPCrack
- Cracking S/MIME Encryption Using Idle CPU Time
- Cryptography Tools
- Module 26: Penetration Testing
- Introduction to Penetration Testing (PT)
- Categories of security assessments
- Vulnerability Assessment
- Limitations of Vulnerability Assessment
- Testing
- Penetration Testing Tools
- Threat
- Other Tools Useful in Pen-Test
- Phases of Penetration Testing
- Pre-attack Phase
- Best Practices
- Results that can be Expected
- Passive Reconnaissance
- Active Reconnaissance
- Attack Phase
- Post Attack Phase and Activities
- Penetration Testing Deliverables Templates
- Module 27: Covert Hacking
- Insider Attacks
- What is Covert Channel?
- Security Breach
- Why Do You Want to Use Covert Channel?
- Motivation of a Firewall Bypass
- Covert Channels Scope
- Covert Channel: Attack Techniques
- Simple Covert Attacks
- Advanced Covert Attacks
- Standard Direct Connection
- Reverse Shell (Reverse Telnet)
- Direct Attack Example
- In-Direct Attack Example
- Reverse Connecting Agents
- Covert Channel Attack Tools
- Covert Channel Hacking Tool: Active Port Forwarder
- Covert Channel Hacking Tool: CCTT
- Covert Channel Hacking Tool: Firepass
- Covert Channel Hacking Tool: MsnShell
- Covert Channel Hacking Tool: Web Shell
- Covert Channel Hacking Tool: NCovert
- Covert Channel Hacking via Spam E-mail Messages
- Hydan
- Module 28: Writing Virus Codes
- Introduction of Virus
- Types of Viruses
- Symptoms of a Virus Attack
- Prerequisites for Writing Viruses
- Required Tools and Utilities
- Virus Infection Flow Chart
- Components of Viruses
- Testing Virus Codes
- Tips for Better Virus Writing
- Module 29: Assembly Language Tutorial
- Base 10 System
- Base 2 System
- Decimal 0 to 15 in Binary
- Binary Addition (C stands for Canary)
- Hexadecimal Number
- Hex Example
- Hex Conversion
- nibble
- Computer memory
- Characters Coding
- ASCII and UNICODE
- CPU
- Machine Language
- Compilers
- Clock Cycle
- Original Registers
- Instruction Pointer
- Pentium Processor
- Interrupts
- Interrupt handler
- External interrupts and Internal interrupts
- Handlers
- Machine Language
- Assembly Language
- Assembler
- Assembly Language Vs High-level Language
- Assembly Language Compilers
- Instruction operands
- MOV instruction
- ADD instruction
- SUB instruction
- INC and DEC instructions
- Directive
- preprocessor
- equ directive
- %define directive
- Data directives
- Labels
- Input and output
- C Interface
- Call
- Creating a Program
- Why should anyone learn assembly at all?
- Assembling the code
- Compiling the C code
- Linking the object files
- Understanding an assembly listing file
- Big and Little Endian Representation
- Skeleton File
- Working with Integers
- Signed integers
- Signed Magnitude
- Two's Compliment
- If statements
- Do while loops
- Indirect addressing
- Subprogram
- The Stack
- The SS segment
- ESP
- The Stack Usage
- The CALL and RET Instructions
- General subprogram form
- Local variables on the stack
- General subprogram form with local variables
- Multi-module program
- Saving registers
- Labels of functions
- Calculating addresses of local variables
- Module 30: Exploit Writing
- Exploits Overview
- Prerequisites for Writing Exploits and Shellcodes
- Purpose of Exploit Writing
- Types of Exploits
- Stack Overflow
- Heap Corruption
- The Proof-of-Concept and Commercial Grade Exploit
- Converting a Proof of Concept Exploit to Commercial Grade Exploit
- Attack Methodologies
- Socket Binding Exploits
- Tools for Exploit Writing
- Steps for Writing an Exploit
- Differences Between Windows and Linux Exploits
- Shellcodes
- NULL Byte
- Types of Shellcodes
- Tools Used for Shellcode Development
- Steps for Writing a Shellcode
- Issues Involved With Shellcode Writing
- Module 31: Smashing the Stack for Fun and Profit
- What is a Buffer?
- Static Vs Dynamic Variables
- Stack Buffers
- Data Region
- Memory Process Regions
- What Is A Stack?
- Why Do We Use A Stack?
- The Stack Region
- Stack frame
- Stack pointer
- Procedure Call (Procedure Prolog)
- Compiling the code to assembly
- Call Statement
- Return Address (RET)
- Word Size
- Stack
- Buffer Overflows
- Error
- Why do we get a segmentation violation?
- Segmentation Error
- Instruction Jump
- Guess Key Parameters
- Calculation
- Shell Code
- Let's try to understand what is going on here. We'll start by studying main:
- execve()
- exit.c
- The code in Assembly
- JMP
- Code using indexed addressing
- Offset calculation
- shellcodeasm.c
- testsc.c
- Compile the code
- NULL byte
- shellcodeasm2.c
- testsc2.c
- Writing an Exploit
- overflow1.c
- Compiling the code
- sp.c
- vulnerable.c
- NOPs
- Module 32: Windows Based Buffer Overflow Exploit Writing
- Buffer Overflow
- Stack overflow
- Writing Windows Based Exploits
- Exploiting stack based buffer overflow
- OpenDataSource Buffer Overflow Vulnerability Details
- Simple Proof of Concept
- Windbg.exe
- Analysis
- EIP Register
- Execution Flow
- But where can we jump to?
- Offset Address
- The Query
- Finding jmp esp
- Debug.exe
- listdlls.exe
- Msvcrt.dll
- Out.sql
- The payload
- ESP
- Limited Space
- Getting Windows API/function absolute address
- Memory Address
- Other Addresses
- Compile the program
- Final Code
- Module 33: Reverse Engineering
- Positive Applications of Reverse Engineering
- Ethical Reverse Engineering
- World War Case Study
- DMCA Act
- What is Disassembler?
- Why do you need to decompile?
- Professional Disassembler Tools
- Tool: IDA Pro
- Convert Machine Code to Assembly Code
- Decompilers
- Program Obfuscation
- Convert Assembly Code to C++ code
- Machine Decompilers
- Tool: dcc
- Machine Code of compute.exe Program
- Assembly Code of compute.exe Program
- Code Produced by the dcc Decompiler in C
- Tool: Boomerang
- What Boomerang Can Do?
- Andromeda Decompiler
- Tool: REC Decompiler
- Tool: EXE To C Decompiler
- Delphi Decompilers
- Tools for Decompiling .NET Applications
- Salamander .NET Decompiler
- Tool: LSW DotNet-Reflection-Browser
- Tool: Reflector
- Tool: Spices NET.Decompiler
- Tool: Decompilers.NET
- .NET Obfuscator and .NET Obfuscation
- Java Bytecode Decompilers
- Tool: JODE Java Decompiler
- Tool: JREVERSEPRO
- Tool: SourceAgain
- Tool: ClassCracker
- Python Decompilers
- Reverse Engineering Tutorial
- OllyDbg Debugger
- How Does OllyDbg Work?
- Debugging a Simple Console Application
- Module 34: Macintosh Hacking
- Introduction to MAC OS
- Vulnerabilities in MAC
- How a Malformed Installer Package Can Crack Mac OS X
- Worm and Viruses in MAC
- MAC OS X Trojans
- Anti-Viruses in MAC
- Mac Security Tools
- Countermeasures
- Module 35: Hacking Routers, cable Modems and Firewalls
- Network Devices
- Identifying a Router
- HTTP Configuration Arbitrary Administrative Access Vulnerability
- ADMsnmp
- Solarwinds MIB Browser
- Brute-Forcing Login Services
- Hydra
- Analyzing the Router Config
- Cracking the Enable Password
- Tool: Cain and Abel
- Implications of a Router Attack
- Types of Router Attacks
- Router Attack Topology
- Denial of Service (DoS) Attacks
- Packet "Mistreating" Attacks
- Routing Table Poisoning
- Hit-and-run Attacks vs. Persistent Attacks
- Cisco Router
- Eigrp-tool
- Tool: Zebra
- Tool: Yersinia for HSRP, CDP, and other layer 2 attacks
- Tool: Cisco Torch
- Monitoring SMTP(port25) Using SLcheck
- Monitoring HTTP(port 80)
- Cable Modem Hacking
- www.bypassfirewalls.net
- Waldo Beta 0.7 (b)
- Module 36: Hacking Mobile Phones, PDA and Handheld Devices
- Different OS in Mobile Phone
- Different OS Structure in Mobile Phone
- Evolution of Mobile Threat
- Threats
- What Can A Hacker Do
- Vulnerabilities in Different Mobile Phones
- Malware
- Spyware
- Blackberry
- PDA
- iPod
- Mobile: Is It a Breach to Enterprise Security?
- Viruses
- Antivirus
- Security Tools
- Defending Cell Phones and PDAs Against Attack
- Mobile Phone Security Tips
- Module 37: Bluetooth Hacking
- Bluetooth Introduction
- Security Issues in Bluetooth
- Security Attacks in Bluetooth Devices
- Bluetooth hacking tools
- Bluetooth Viruses and Worms
- Bluetooth Security tools
- Countermeasures
- Module 38: VoIP Hacking
- What is VoIP
- VoIP Hacking Steps
- Footprinting
- Scanning
- Enumeration
- Steps to Exploit the Network
- Covering Tracks
- Module 39: RFID Hacking
- RFID- Definition
- Components of RFID Systems
- RFID Collisions
- RFID Risks
- RFID and Privacy Issues
- Countermeasures
- RFID Security and Privacy Threats
- Protection Against RFID Attacks
- RFID Guardian
- RFID Malware
- RFID Exploits
- Vulnerabilities in RFID-enabled Credit Cards
- RFID Hacking Tool: RFDump
- RFID Security Controls
- RFID Security
- Module 40: Spamming
- Introduction
- Techniques used by Spammers
- How Spamming is performed
- Ways of Spamming
- Spammer: Statistics
- Worsen ISP: Statistics
- Top Spam Effected Countries: Statistics
- Types of Spam Attacks
- Spamming Tools
- Anti-Spam Techniques
- Anti- Spamming Tools
- Countermeasures
- Module 41: Hacking USB Devices
- Introduction to USB Devices
- Electrical Attack
- Software Attack
- USB Attack on Windows
- Viruses and Worms
- Hacking Tools
- USB Security Tools
- Countermeasures
- Module 42: Hacking Database Servers
- Hacking Database server: Introduction
- Hacking Oracle Database Server
- Attacking Oracle
- Hacking SQL Server
- Security Tools
- SQL Server Security Best Practices: Administrator Checklist
- SQL Server Security Best Practices: Developer Checklist
- Module 43: Cyber Warfare- Hacking, Al-Qaida and Terrorism
- Cyber Terrorism Over Internet
- Cyber-Warfare Attacks
- 45 Muslim Doctors Planned US Terror Raids
- Net Attack
- Al-Qaeda
- Why Terrorists Use Cyber Techniques
- Cyber Support to Terrorist Operations
- Planning
- Recruitment
- Research
- Propaganda
- Propaganda: Hizballah Website
- Cyber Threat to the Military
- Russia "hired botnets" for Estonia Cyber-War
- NATO Threatens War with Russia
- Bush on Cyber War: "a subject I can learn a lot about"
- E.U. Urged to Launch Coordinated Effort Against Cybercrime
- Budget: Eye on Cyber-Terrorism Attacks
- Cyber Terror Threat is Growing, Says Reid
- Terror Web 2.0
- Table 1: How Websites Support Objectives of terrorist/Extremist Groups
- Electronic Jihad
- Electronic Jihad App Offers Cyber Terrorism for the Masses
- Cyber Jihad Cyber Firesale
- http://internet-haganah.com/haganah/
- Module 44: Internet Content Filtering Techniques
- Introduction to Internet Filter
- Key Features of Internet Filters
- Pros and Cons of Internet Filters
- Internet Content Filtering Tools
- Module 45: Privacy on the Internet
- Internet privacy
- Proxy privacy
- Spyware privacy
- Email privacy
- Cookies
- Examining Information in Cookies
- How Internet Cookies Work
- How Google Stores Personal Information
- Google Privacy Policy
- Web Browsers
- Web Bugs
- Downloading Freeware
- Internet Relay Chat
- Pros and Cons of Internet Relay Chat
- Electronic Commerce
- Internet Privacy Tools: Anonymizers
- Internet Privacy Tools: Firewall Tools
- Internet Privacy Tools: Others
- Best Practices
- Counter measures
- Module 46: Securing Laptop Computers
- Statistics for Stolen and Recovered Laptops
- Statistics on Security
- Percentage of Organizations Following the Security Measures
- Laptop threats
- Laptop Theft
- Fingerprint Reader
- Protecting Laptops Through Face Recognition
- Bluetooth in Laptops
- Tools
- Securing from Physical Laptop Thefts
- Hardware Security for Laptops
- Protecting the Sensitive Data
- Preventing Laptop Communications from Wireless Threats
- Protecting the Stolen Laptops from Being Used
- Security Tips
- Module 47: Spying Technologies
- Spying
- Motives of Spying
- Spying Devices
- Vendors Hosting Spy Devices
- Spying Tools
- Anti-Spying Tools
- Module 48: Corporate Espionage- Hacking Using Insiders
- Introduction To Corporate Espionage
- Information Corporate Spies Seek
- Insider Threat
- Different Categories of Insider Threat
- Privileged Access
- Driving Force behind Insider Attack
- Common Attacks carried out by Insiders
- Techniques Used for Corporate Espionage
- Process of Hacking
- Former Forbes Employee Pleads Guilty
- Former Employees Abet Stealing Trade Secrets
- California Man Sentenced For Hacking
- Federal Employee Sentenced for Hacking
- Facts
- Key Findings from U.S Secret Service and CERT Coordination Center/SEI study on Insider Threat
- Tools
- Countermeasures
- Module 49: Creating Security Policies
- Security policies
- Key Elements of Security Policy
- Defining the Purpose and Goals of Security Policy
- Role of Security Policy
- Classification of Security Policy
- Design of Security Policy
- Contents of Security Policy
- Configurations of Security Policy
- Implementing Security Policies
- Types of Security Policies
- Policy Statements
- Basic Document Set of Information Security Policies
- E-mail Security Policy
- Software Security Policy
- Software License Policy
- Points to Remember While Writing a Security Policy
- Sample Policies
- Module 50: Software Piracy and Warez
- Software Activation: Introduction
- Piracy
- Software Copy Protection Backgrounders
- Warez
- Tool: Crypkey
- Tool: EnTrial
- EnTrial Tool: Distribution File
- EnTrial Tool: Product & Package Initialization Dialog
- EnTrial Tool: Add Package GUI
- Tool: DF_ProtectionKit
- Tool: Crack Killer
- Tool: Logic Protect
- Tool: Software License Manager
- Tool: Quick License Manager
- Tool: WTM CD Protect
- Module 51: Hacking and Cheating Online Games
- Online Games
- Basics of Game Hacking
- Online Gaming Exploits
- Types of Exploits
- Online Gaming Risks
- Threats in Online Gaming
- Online Gaming Theft
- How Passwords for Online Games are Stolen
- Social Engineering and Phishing
- An Example of a Phishing Email
- Exploiting Game Server Vulnerabilities
- Vulnerability in-game chat in Lineage 2
- Using Malware
- Malicious Programs and Malware
- Email-Worm.Win32.Lewor.a
- Part of a file infected by Virus.Win32.Alman.a
- Online Gaming Malware from 1997-2007
- How Modern Attacks are Conducted
- Geographical Considerations
- Statistics
- Best Practices for Secure Online Gaming
- Module 52: Hacking RSS and Atom
- Introduction
- Areas Where RSS and Atom is Used
- Building a Feed Aggregator
- Routing Feeds to the Email Inbox
- Monitoring the Server with Feeds
- Tracking Changes in Open Source Projects
- Risks by Zone
- Reader Specific Risks
- Utilizing the Web Feeds Vulnerabilities
- Example for Attacker to Attack the Feeds
- Tools
- Module 53: Hacking Web Browsers
- Introduction
- How Web Browsers Work
- How Web Browsers Access HTML Documents
- Protocols for an URL
- Hacking Firefox
- Firefox Security
- Hacking Internet Explorer
- Internet Explorer Security
- Hacking Opera
- Security Features of Opera
- Hacking Safari
- Hacking Netscape
- Securing Netscape
- Module 54: Proxy Server Technologies
- Introduction: Proxy Server
- Working of Proxy Server
- Types of Proxy Server
- Socks Proxy
- Free Proxy Servers
- Use of Proxies for Attack
- Tools
- How Does MultiProxy Work
- TOR Proxy Chaining Software
- TOR Proxy Chaining Software
- AnalogX Proxy
- NetProxy
- Proxy+
- ProxySwitcher Lite
- Tool: JAP
- Proxomitron
- SSL Proxy Tool
- How to Run SSL Proxy
- Module 55: Data Loss Prevention
- Introduction: Data Loss
- Causes of Data Loss
- How to Prevent Data Loss
- Impact Assessment for Data Loss Prevention
- Tools
- Module 56: Hacking Global Positioning System (GPS)
- Global Positioning System (GPS)
- Terminologies
- GPS Devices Manufacturers
- Gpsd-GPS Service Daemon
- Sharing Waypoints
- Wardriving
- Areas of Concern
- Sources of GPS Signal Errors
- Methods to Mitigate Signal Loss
- GPS Secrets
- Firmware Hacking
- GPS Tools
- Module 57: Computer Forensics and Incident Handling
- Computer Forensics
- Incident Handling
- Incident Management
- Why don't Organizations Report Computer Crimes
- Estimating Cost of an Incident
- Whom to Report an Incident
- Incident Reporting
- Vulnerability Resources
- What is CSIRT
- World CERTs
- IRTs Around the World
- Module 58: Credit Card Frauds
- E-Crime
- Statistics
- Credit Card
- Credit Card Generators
- Credit Card Fraud Detection
- Best Practices: Ways to Protect Your Credit Cards
- Module 59: How to Steal Passwords
- Password Stealing
- How to Steal Passwords
- Password Stealing Techniques
- Password Stealing Trojans
- Password Stealing Tools
- Recommendations for Improving Password Security
- Best Practices
- Module 60: Firewall Technologies
- Firewalls: Introduction
- Hardware Firewalls
- Software Firewalls
- Windows Firewalls
- Mac OS X Firewalls
- Module 61: Threats and Countermeasures
- Module 62: Case Studies
- Module 63: Botnets
- What Is a Botnet?
- The Botnet Life Cycle
- Uses of Botnets
- How to Identify Whether Your Computer is a Botnet
- Common Botnets
- Botnet Detection: Tools and Techniques
- Tool: Ourmon
- Anomaly Detection
- IRC Protocol
- Detecting an IRC Client Botnet
- Detecting an IRC Botnet Server
- Automated Packet Capture
- Ourmon Event Log
- Sniffing IRC Messages
- Sandboxes
- CWSandbox
- Automated Analysis Suite (AAS)
- Responding to Botnets
- Module 64: Economic Espionage
- Economic Espionage
- Who are Behind This?
- Motives
- Economic Intelligence
- Trade Secrets
- How Foreign Competitors Get the Information
- Methods of Acquiring Trade Secrets
- How Economic Espionage Increases
- Difference Between Industrial Espionage and Economic Espionage
- Competitive Intelligence
- The Economic Espionage Act of 1996, 18 U.S.C. §§ 1831-1839
- Methods for Economic Espionage Protection
- Module 65: Patch Management
- Hotfixes and Patches
- What is Patch Management
- Patch Testing
- Understanding Patch Monitoring and Management
- Types of Patches Defined by Microsoft
- Opsware Server Automation System (SAS)
- Patch Management Checklist
- Best Practices for Patch Management
- Module 66: Security Convergence
- Security Convergence
- Challenges Confronting an Effective Security Convergence Policy
- Benefits of Using Risk Management in Planning IT Security Administration
- RAMCAP
- Open Security Exchange (OSE)
- CISO (Chief Information Security Officer)
- Elements of Building Secure Operations
- Enterprise Security Management (ESM)
- Convergence of Network Operations and Security Operations
- Log Collection
- Log Normalization
- Log Severity
- Log Time Correction
- Log Categorization
- Event Storage
- Discovering and Interacting with Patterns
- Intelligent Platform Management Interface (IPMI) Standard
Benefits of taking the CEH: Certified Ethical Hacking v6.1 course at NetCom
-
Why choose EC-Council Training at NetCom Learning?
As a recognition for training excellence, NetCom Learning was chosen by Microsoft as the 2007 Worldwide Learning Solutions Partner of the year out of 1400 training companies. In addition, we have won numerous other training awards for quality and customer satisfaction by CompTIA, EC-Council and other vendors. We are simply passionate about learning and achieving the highest customer satisfaction in your learning experience!
See the training value proposition below:
Â
CEH: Certified Ethical Hacker v7Â CEH v7 showcases the latest hacking techniques and countermeasures.
This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. CEHv7.1 provides a comprehensive ethical hacking and network security-training program to meet the standards of highly skilled security professionals. Hundreds of SMEs and authors have contributed towards the content presented in the CEHv7.1 courseware. Latest tools and exploits uncovered from the underground community are featured in the new package. When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking. Â
- Updated core content and well-organized flow for a best-in-class learning experience.
- Exclusive section for countermeasures against different attacks with detailed explanation of how to implement the countermeasures in a real-time environment.
- Attractive and descriptive diagrammatic representations of concepts and attacks.
- Complete section dedicated to penetration testing, illustrating how to implement learned concepts to test network system security.
- Courseware includes over 20GB of the latest hacking and security tools.
- A result-oriented, descriptive lab manual; the labs showcased in the courseware are tested against the latest Operating Systems with all patches and hot fixes applied.
- CEH v7 meets Government and DoD compliance with Federal Information Security Management Act (FISMA) and DoD Directive 8570.1-M.
- Over 1000 minutes of video demonstrations and more.
 |
|
-
NetCom provides Authorized Training
NetCom Learning is a Microsoft Gold Certified Partner for Learning Solutions (CPLS), Cisco Learning Partner, CompTIA Platinum Partner, EC-Council Accredited Training Center, Adobe Authorized Training Center, Autodesk Authorized Training Center and many others. We are proud to offer the highest quality, authorized training solutions from our many partners for our customers.
See our comprehensive list of partner authorizations.
-
Award winning, world-class Instructors
- Vastly experienced working within multinational environments and capable of connecting to different audiences - In-depth expertise in the implementation, troubleshooting and documentation of networks and security systems, with strong "hands on" technical knowledge of CISSP, CEH and CHFI. - Master of Science in Electronics Engineering, and holder of several technical certifications. - Highly-skilled in diverse fields ranging from Security, Computer Forensics, Networking, Routing Protocols, Programming, Databases and Applications to name a few.
Bio:
With over 25 years of technical experience, Emilio brings a dynamic set of skills supported by a Masters Degree in Electronics Engineering and on-the-field experience working in multinational environments. He also holds more than 12 Cisco, CompTIA, and Microsoft certifications. Although he is well versed and thorough in multiple technological fields, his technical forte lies in the security domain, specifically CISSP, CEH and CHFI.
Emilio�s skills have evolved over time, studying closely and constantly staying well informed of the growing cyber threats. These are just some of the few reasons why Emilio brings to his classes more than just what's in the books.
|
- Over 20 years experience in the IT industry. - CEH and Microsoft training for many government agencies, including the United States Department of Homeland Security, and the Federal Bureau of Investigation. - CEH and Microsoft training for Fortune corporations such as Merrill Lynch and ADP.
Bio:
Richard is a premier Microsoft Certified Trainer and Certified EC-Council Instructor. He has over 20 years of experience as a network administrator, security consultant, vulnerability assessor, and penetration tester for assorted Fortune companies.
Richardâ??s knowledge on the development and implementation of policies and procedures concerning the security of network data is unsurpassed. He has conducted successful CEH and Microsoft training classes for many government agencies including the United States Department of Homeland Security, the Department of Justice and the Federal Bureau of Investigation, as well as Fortune enterprises such as Merrill Lynch and ADP.
|
-
Actual Client Testimonials
|
Mar 02 2012 |
The training was "outstanding". Mr. Garcia is the best instructor on the subject; very knowledgeable.
- Draughon W.
|
| Course(s) Taken |
|
|
|
|
Jan 13 2012 |
Excellent instructor.
Good Course material.
-Dan S.
|
| Course(s) Taken |
|
|
|
|
Sep 30 2011 |
I will be back for more training. The training material/illustrations are perfect. Once I pass the certification it will make all this work well worth it.
-Robert K.
|
| Course(s) Taken |
|
|
|
|
Sep 19 2011 |
The instructor was very knowledgeable and presented well!
-Marvin L.
|
| Course(s) Taken |
|
|
|
|
Sep 19 2011 |
The instructor's breath of knowledge and professionalism was nothing short of outstanding. As such, I would continue to coordinate service through Greg. He has assured high quality training for the past few years.
-Greg C.
|
| Course(s) Taken |
|
|
|
|
Sep 19 2011 |
A lot of material, but good to go!
-Victor W.
|
| Course(s) Taken |
|
|
|
|
May 07 2010 |
Very knowledgeable instructor. Class was very helpful.
-Robert D.
|
| Course(s) Taken |
- CEH and CHFI Certification
|
|
|
May 07 2010 |
| Overall experience is good. Instructor very knowledgeable Educational consultant also very helpful and great. -Binh V.
|
| Course(s) Taken |
- CEH and CHFI Certification
|
|
-
Awards won by NetCom
NetCom Learning is an award winning, customer focused company. We are simply Passionate About Learning!
See our list of awards.
-
Specialized Boot Camp Training

This training is also available as a boot camp. NetCom is world famous for delivering specialized boot camp training to our clients. For answers to questions regarding our boot camp training delivery format, please refer to our Boot Camp FAQ section.
Enrollment Options for the CEH: Certified Ethical Hacking v6.1 course
- Contact us to customize this class with your own dates, times and location. You can also call 1-888-563-8266 or chat live with an Educational Consultant.
Training Delivery Methods
Take this training with one of the following training delivery methods
-
Classroom Training

NetCom’s classroom training ensures that you have state-of-the-art tools, techniques and practices you need to succeed on the job. Our instructors are active practitioners and true masters in their fields. With convenient classes at multiple learning centers across the US, you never have to go far to get ahead.
-
Live Online Training (LOT)

NetCom’s premium Live Online Training (we call it LOT) is the ultimate in convenience and cost-effectiveness. LOT combines interactive video instruction via the latest web conference technology, and post-class access to learning labs for a best-in-class learning experience. Learn more about LOT
-
Boot Camp Training

NetCom’s intensive boot camps are designed to advance your skills in the shortest possible amount of time and get you certified. Boot camps go at a faster pace and often run for longer days, so you must have some level of subject matter experience before enrolling. Boot camps have mandatory assessment tests to ensure no one will slow down the class for other students. Learn more about Boot Camps
-
Private Onsite Training

With NetCom’s private training programs, you decide where and when courses are held. Tailor the training to reflect your industry, corporate culture, goals and schedule. You pick the course content, length of training and instructional technique. Save money by doing bulk customized training. Learn more about Private Onsite Training
-
Private 1-on-1 Training

NetCom’s private 1-on-1 training focuses on the highest quality training possible. You get individualized, full attention from the instructor and you decide where and when courses are held. The training is custom tailored to reflect your industry, corporate culture, goals and schedule. You pick the course content, length of training and instructional technique. Learn more about Private 1-on-1 Training
Contact us
|
|