CEH v13 — Certified Ethical Hacker & Cybersecurity

Gather intelligence on target networks without triggering early detection.

• Open-Source Intelligence (OSINT) gathering, Google dorking, and Shodan reconnaissance
• DNS enumeration, WHOIS queries, and network footprinting techniques
• Advanced Nmap scanning: SYN stealth scan, UDP scan, OS fingerprinting, and NSE scripts
• Vulnerability scanning with Nessus and OpenVAS vulnerability managers

Gain unauthorized access and escalate privileges on vulnerable target hosts.

• Metasploit Framework: Exploit modules, payloads (Meterpreter), and encoders
• Client-side attacks and malicious payload creation with msfvenom
• Linux privilege escalation: SUID binaries, sudo exploits, and kernel exploits
• Windows privilege escalation: Insecure service permissions, unquoted service paths, and Mimikatz

Audit and exploit web applications using modern proxy and interception tools.

• Burp Suite Professional: Intercepting HTTP/HTTPS traffic, Intruder, and Repeater
• SQL Injection (SQLi): Error-based, UNION-based, and Blind SQL injection with sqlmap
• Cross-Site Scripting (XSS): Stored, Reflected, and DOM-based attacks
• Broken Object Level Authorization (BOLA) and REST API security testing

Test non-traditional perimeters and human factors in corporate security.

• Wireless penetration testing: WPA2/WPA3 4-way handshake capture and cracking with Aircrack-ng
• Rogue Access Points and Evil Twin attacks with Wi-Fi Pineapple concepts
• Social Engineering Toolkit (SET): Spear phishing credential harvesting campaigns
• Physical security auditing and hardware implant concepts

Compromise enterprise domain environments and compile professional audit deliverables.

• Active Directory attack graph modeling using BloodHound
• Kerberoasting, AS-REP Roasting, and Pass-the-Hash (PtH) lateral movement
• Antivirus evasion: Obfuscation techniques, process hollowing, and in-memory execution
• Writing professional Penetration Testing reports with CVSS scoring and remediation plans