Certified Ethical Hacker (CEH) Certification Programme

Introduction to Ethical Hacking

Hacking phases, attack types, threat actors, and the legal and ethical framework governing penetration testing in Malaysia and globally.

Footprinting and Reconnaissance

Passive and active information gathering techniques. Open-source intelligence (OSINT), Google dorking, DNS enumeration, and social engineering basics.

Scanning Networks

Network scanning methodologies, port scanning, OS fingerprinting, and vulnerability identification using tools such as Nmap and Nessus.

Enumeration

Extracting system information including usernames, network shares, services, and security configurations from target systems.

Vulnerability Analysis

Identifying and classifying vulnerabilities using scoring frameworks (CVSS) and vulnerability databases. Hands-on use of scanning tools.

System Hacking

Password cracking, privilege escalation, maintaining access, and covering tracks. Understanding attacker techniques to build better defences.

Malware Threats

Types of malware including viruses, ransomware, trojans, and spyware. How malware spreads, executes, and how to detect and mitigate infections.

Sniffing and Session Hijacking

Network sniffing techniques, ARP poisoning, session token theft, and countermeasures for securing network communications.

Social Engineering

Human manipulation tactics used in attacks. Phishing, vishing, pretexting, and building organisational defences against social engineering.

Web Application Hacking

OWASP Top 10 vulnerabilities, SQL injection, cross-site scripting (XSS), and web application attack and defence techniques.

Wireless Network Hacking

Wi-Fi security weaknesses, WPA2 cracking, rogue access points, and securing corporate wireless networks.

Cryptography

Encryption algorithms, PKI basics, hashing, digital signatures, and common cryptographic attacks.