Certified Ethical Hacker (CEH v13 Elite)
SU-415(5 days)
Certified Ethical Hacker (CEH v13 Elite)
29.500 DKK
(excl. VAT)
Course calendar
Description
In this course, you learn to scan, test, hack and secure IT infrastructure using the same tools and techniques that real attackers use. You cover the attack surface broadly, from network scanning and enumeration through system hacking, malware, sniffing and social engineering to web applications, SQL injection, wireless networks, mobile platforms, IoT and OT, cloud and cryptography. The course is structured around the five phases of ethical hacking: reconnaissance, scanning, gaining access, maintaining access and covering tracks, and it provides a solid foundation for earning the globally recognized Certified Ethical Hacker certification from EC-Council.
You work with examples and cases taken directly from recent cyberattacks, large and small. The many hands-on exercises are highly flexible, so each participant can try out the technologies that fit their own or their organization's infrastructure. The course is usually taught in Danish, and you can always attend in person.
The premise of the work is that you try, with permission, to break into your own systems to find the weaknesses before others do. That is why we cover in detail the ethical and legal framework you operate within as an ethical hacker. In addition to technical skills, the course also emphasizes collaboration skills. Planning and communication are built in as key topics, because the results of a security test are only valuable if they can be communicated to the people who need to act on them.
AI as an attack target and as a tool
A genuinely new feature of the current version is that AI systems are treated as an attack target in their own right. The course covers the OWASP Top 10 for LLM Applications, including direct and indirect prompt injection, insecure output handling, training data poisoning, excessive agency and model theft. You also look at attacks on machine learning models such as model inversion, membership inference and data poisoning, and at how LLM integrations are protected in practice. This is relevant for anyone who has LLM-based solutions in their production environment and needs to assess where they can be broken.
AI is also used as a tool throughout the labs, where you use language models to support footprinting, scanning and enumeration and to generate scripts that automate repetitive tasks, among other things. On the attacker's side, you see how phishing emails, deepfakes and voice cloning are produced with generative tools, and how AI-based malware is built and analyzed.
After the course, you can:
- Carry out a structured attack through all five phases of ethical hacking
- Identify and exploit vulnerabilities in networks, web applications, cloud environments and wireless networks
- Recognize and test for OWASP Top 10 vulnerabilities in LLM applications, including prompt injection
- Assess the risks of AI- and LLM-based solutions in your own organization
- Analyze malware, including fileless and AI-generated malware
- Use AI to support reconnaissance, scanning and enumeration
- Propose concrete countermeasures for the vulnerabilities you find
- Plan and communicate a security test within the ethical and legal framework
The course has a broad scope and is relevant for all IT professionals who want to build their skills in cybersecurity and ethical hacking. Some participants go on to take a very active role in IT security testing, while others move into a more advisory role.
Included in the course price: the CEH v13 Elite package
As a participant, you get access to EC-Council's complete CEH v13 Elite package at no extra cost:
- 180 days of access to hands-on labs with 221 exercises and more than 4,000 tools
- The CEH exam (knowledge-based) with one free retake
- The CEH Practical Exam, the hands-on certification exam
- The CEH Master title if you pass both exams
- Access to CEH Engage, where you test your skills in realistic attack scenarios
- Access to CEH Compete, monthly CTF competitions against the global CEH community
- 10 additional ethical hacking videos, covering Wireshark, Nmap, Burp Suite and the OWASP Top 10, among other topics
Related exam
Prerequisites
To get the most out of the course, we recommend experience or knowledge equivalent to:
Next steps
If you want to build on your skills, these may be relevant:
Certification bundles
Module overview
- Information security fundamentals, attack classification and information warfare
- Hacking concepts, ethical hacking scope and the skills of an ethical hacker
- AI-driven ethical hacking and how AI supports the ethical hacker's workflow
- Hacking methodologies and frameworks: Cyber Kill Chain, MITRE ATT&CK, Diamond Model
- Information security controls, risk management, threat intelligence and incident response
- Laws and standards: PCI DSS, ISO/IEC, HIPAA, SOX, GDPR and national cyber law
- Footprinting concepts, objectives and methodology
- Search engine footprinting, Google hacking database and Shodan, with AI-assisted techniques
- Internet research services, dark web footprinting and competitive intelligence gathering
- Social networking, Whois, DNS, network and email footprinting
- AI-powered OSINT tools and custom Python scripts to automate footprinting tasks
- Footprinting countermeasures
- Network scanning concepts, TCP communication flags and TCP/IP fundamentals
- Scanning tools: Nmap, Hping3, Metasploit and NetScanTools Pro
- Host discovery techniques and port and service discovery, including AI-assisted scanning
- OS discovery through banner grabbing and fingerprinting
- Scanning beyond IDS and firewalls: fragmentation, spoofing, decoys and proxy chaining
- Network scanning countermeasures and detection
- Enumeration concepts, techniques and the services and ports worth targeting
- NetBIOS, SNMP and LDAP enumeration
- NTP, NFS, SMTP and DNS enumeration, including zone transfer and DNSSEC zone walking
- IPsec, VoIP, RPC, Unix/Linux user and SMB enumeration
- AI-assisted enumeration and custom scripts to automate enumeration tasks
- Enumeration countermeasures
- Vulnerability classification and common root causes
- Scoring systems and databases: CVSS, CVE, NVD and CWE
- The vulnerability management life cycle from pre-assessment to post-assessment
- Assessment tools including Nessus Essentials, OpenVAS, Nikto and GFI LanGuard
- AI-powered vulnerability assessment and scanning with Nmap, Python and Skipfish
- Structure and components of a vulnerability assessment report
- Password cracking: Windows authentication, hash extraction, attack types and defences
- Vulnerability exploitation with Metasploit, buffer overflows, ROP and exploit chaining
- Privilege escalation through DLL hijacking, UAC bypass, misconfigured services and ADCS abuse
- Maintaining access: keyloggers, spyware, rootkits, NTFS streams and steganography
- Establishing persistence, including Golden and Silver Ticket, DCSync and WMI event subscription
- Clearing logs, covering tracks and anti-forensics techniques
- Malware components, distribution techniques and advanced persistent threats
- Trojan types, creation, wrapping and deployment, plus antivirus evasion
- Virus, worm and ransomware concepts and lifecycles
- Fileless malware: in-memory exploits, script-based injection and registry persistence
- AI-based malware built with GANs, reinforcement learning and NLP
- Static and dynamic malware analysis, plus malware countermeasures and EDR/XDR tools
- Sniffing concepts, passive versus active sniffing and vulnerable protocols
- MAC attacks: CAM table behaviour, MAC flooding and switch port stealing
- DHCP starvation and rogue DHCP server attacks
- ARP poisoning, MAC and IRDP spoofing, VLAN hopping and STP attacks
- DNS poisoning techniques and defences
- Wireshark filters and stream analysis, plus sniffer detection
- Social engineering concepts, attack phases and why it works
- Human-based techniques: impersonation, vishing, tailgating, baiting and elicitation
- Computer-based techniques: phishing types, phishing tools and crafting phishing emails with ChatGPT
- AI-based impersonation through deepfake video and voice cloning
- Mobile-based techniques: malicious apps, SMiShing and QRLJacking
- Identity theft, countermeasures and phishing audits with OhPhish
- DoS and DDoS concepts and how distributed attacks are orchestrated
- Botnets, botnet ecosystems and propagation of malicious code
- Volumetric, protocol and application-layer attack techniques
- Specific vectors: SYN flood, Slowloris, NTP amplification, DRDoS and ransom DDoS
- Detection techniques and countermeasure strategies
- Protection at ISP level, DDoS appliances and protection services
- Session hijacking concepts, process and types
- Application-level hijacking: session token prediction, sniffing and session fixation
- Client-side attacks including XSS, CSRF and man-in-the-browser
- Network-level hijacking: TCP/IP hijacking, RST and blind hijacking, UDP hijacking
- Session hijacking tools such as Hetty, Caido and bettercap
- Detection methods, development guidelines and prevention including IPsec
- IDS, IPS and firewall concepts, types and architecture
- Firewall types by working mechanism, NGFWs and firewall limitations
- Evasion techniques: fragmentation, spoofing, session splicing and obfuscation
- Tunneling through ICMP, ACK, HTTP, SSH and DNS
- Evading NAC and endpoint security, including AMSI bypass, LoLBins and process injection
- Honeypot types, detection and evasion countermeasures
- Web server architecture and known vulnerabilities in Apache, IIS and NGINX
- Web server attacks: DNS hijacking, directory traversal, defacement, misconfiguration and cache poisoning
- Attack methodology from information gathering and banner grabbing to vulnerability scanning
- AI-assisted footprinting, directory brute forcing and identification of exploitable vulnerabilities
- Countermeasures, security segmentation and detection of hacking attempts
- Patch management practices and tools
- Web application architecture, web services and the vulnerability stack
- OWASP Top 10 application security risks and common attack types
- Injection, XSS, XXE, CSRF, insecure deserialization and clickjacking
- Hacking methodology: footprinting infrastructure, bypassing client-side controls, attacking authentication, authorization and session management
- Web API and webhook security, including OWASP Top 10 API security risks
- AI-powered fuzz testing, SAST and DAST, plus web application firewalls and countermeasures
- SQL injection concepts and how injected queries are constructed and executed
- In-band, error-based, union, blind/inferential and out-of-band SQL injection
- Detection methodology, entry point identification and source code review
- Launching attacks: login bypass, blind extraction of users, tables and columns, second-order injection
- Advanced techniques: OS and file system interaction, backdoors, NoSQL injection and AI-assisted detection
- Signature evasion techniques and SQL injection countermeasures
- Wireless terminology, standards, SSID and the Wi-Fi authentication process
- Wireless encryption: WEP, WPA, WPA2 and WPA3, and the known issues with each
- Wireless threats across access control, integrity, confidentiality and availability
- Wireless hacking methodology: discovery, traffic analysis and attack execution
- Rogue APs, evil twin, KRACK, jamming and RFID cloning
- Cracking WPA/WPA2/WPA3 with Aircrack-ng and hashcat, plus WIPS and countermeasures
- Mobile attack vectors, OWASP Top 10 Mobile Risks and the anatomy of a mobile attack
- App store and sandboxing issues, SMiShing, SS7 exploitation, Simjacker and OTP hijacking
- Android hacking: rooting, drozer, ADB exploitation, Metasploit and Android malware
- iOS hacking: jailbreaking, trustjacking, post-exploitation and iOS malware
- Securing Android and iOS devices, including analysis and vulnerability scanning tools
- Mobile device management, BYOD risks and security guidelines
- IoT architecture, communication models, protocols and OWASP Top 10 IoT threats
- IoT attacks: rolling code, BlueBorne, jamming, SDR-based and fault injection attacks
- IoT hacking methodology from information gathering to firmware analysis and persistence
- OT and ICS fundamentals: components, the Purdue Model, IT/OT convergence and MITRE ATT&CK for ICS
- OT attacks on PLCs, HMIs and Modbus, including the Evil PLC attack and OT supply chain attacks
- Countermeasures, zero-trust for ICS/SCADA and IoT/OT security tools
- Cloud service models, deployment models and shared responsibility
- Container technology, Docker, Kubernetes and serverless computing
- OWASP Top 10 for cloud, Kubernetes and serverless, plus common cloud attacks
- AWS hacking: S3, EC2, IAM and Cognito enumeration, privilege escalation and persistence
- Azure and GCP hacking: reconnaissance, resource enumeration, managed identities and backdoors
- Container hacking and cloud security controls, CASB and best practices per platform
- Symmetric and asymmetric encryption algorithms and their use cases
- Hash functions, message digests, HMAC and multi-layer hashing
- Applications of cryptography: PKI, digital signatures, SSL/TLS, PGP and disk encryption
- Cryptanalysis methods and attacks: brute force, birthday, side-channel, rainbow table and padding oracle
- Quantum computing risks and attacks on classical cryptography
- Countermeasures, key stretching and cryptography tools
Free course advice
We care a lot about helping you find the course path that creates the most value for you and your workplace. Get in touch with our course advisors — they're ready to help you, free of charge and with no obligation.
I can't give anything less than 5 stars across the board. Either you're truly in a class of your own, or I've just been to the wrong course venues before. Fantastic place and atmosphere.... once you've learned to find your way around :-)
Your instructors are exceptional; skilled, competent and good at teaching - so you have everything you need to get off to a good start.
You have fantastic facilities, good food and lovely people throughout the building.
A really good, in-depth course. Your course facilities at Karlebogaard are nothing short of fantastic. A beautiful historic house with lots of fun stories and great course rooms. The course itself was very useful. I learned everything I had hoped to and then some. My instructor was damn good and really funny. He made it a pleasure, and the hours flew by.
Probably the best course I've ever taken and the best instructor I've ever had!! Really good depth and thorough explanations, and on top of that, fantastic food!!!
Delicious food, cozy facilities, good structure and atmosphere. I'll be back when I can.
Absolutely the best course I've ever taken!
The course venue is so inviting and welcoming that it has been a pleasure to be here. Clean, tidy and full of charm. I attended a course where all the individual parts came together into a greater whole that can hardly be described.
I got a lot out of the course. It opened my eyes to possibilities I didn't know existed. I'm sure this won't be the last time we're in touch with SuperUsers.
I never in my wildest dreams imagined that a course venue could be so beautiful. I don't know if it's true, but I have a feeling that the surroundings rub off on the people who work here, so everyone seems incredibly happy.
There's a really great atmosphere. All the way from the woman at the reception desk to the people who work in the kitchen.
The instructor tailored the course to my level to a very large extent and was flexible. I had very high expectations, and they were exceeded.
Great precision, good exercises, good pace, a great atmosphere and maximum learning.
The instructor was very pleasant and the exercises were extremely good. I really learned a lot about the topics the course covered.
On top of that, really nice, calm and green surroundings with good catering - especially good food. I would like to take my courses here again next time.
It was a real pleasure to take a course at SuperUsers. The week we spent on the course was worth the money and means that we can now save many consultant hours. It's always nice to have the knowledge in-house.
There is a relaxed atmosphere in the classroom, lovely surroundings in the building itself, and skilled instructors who do a really good job.
I started using all the knowledge I soaked up on the course almost right away, and now we are well underway with developing our future cloud solution.
There is no doubt about who we will turn to if we need other courses.
This is my first time at SuperUsers. It has been a really good experience. The instructor seems very experienced and competent.
The instructor's strong technical background made the course and the in-depth answers to questions a good experience.
A really nice course venue in pleasant surroundings that make for a good setting for focused learning. The instructor came across as well prepared, with extensive knowledge of the relevant topics.
The instructor also showed a strong ability to answer any questions that came up during the course.
I'll be back the next time I need to take a course. It's a lovely place, the food is fantastic, and the instructor is very knowledgeable and happy to share that knowledge!
The technical depth of the course was really good. The instructor's knowledge went much deeper than the curriculum necessarily requires.
You could throw all kinds of curveballs at the instructor, and he had it all under control - he also made the content exciting.
We have now completed Microsoft 365 courses for a total of 5 people here in our department. Everyone agrees that it was an excellent course with a skilled instructor and communicator who could discuss and explain things at the right level, while also being efficient and bringing humor.
It has been a really good experience.
It's calm and quiet at SuperUsers' country venue. Good atmosphere and catering. Some thought has gone into healthy eating when it comes to food and cake, so it doesn't get completely out of hand.
The instructor is knowledgeable about the topics and readily puts them in a broader perspective by relating them to other relevant areas. It's rewarding that this is possible too, and it gives you ideas for further study.
In addition, the instructor was engaged and entertaining to have presenting the content.
As always, it was a great experience, and you learn a lot in a short time from some very skilled instructors.
I work in Azure almost every day, and both courses have been really good at helping me understand Azure better.
The instructor is very presentation-oriented and gets you involved in the teaching and the material. He is good at varying the teaching so it never gets monotonous.
It is clear that the instructor has hands-on experience and not just the theory, with many good examples that related to real-world challenges we might encounter.
Good facilities and good food, without drowning in unhealthy habits.
Very good course, the instructor was the best. I've been here at SuperUsers before, now I'm here again, and hopefully coming back another time.
The instructor seemed very competent and has extensive knowledge of his field. He was good at explaining things in a clear and humorous way. There were also simple exercises that gave a good understanding.
The instructor was really good at going in depth while still making sure everyone was keeping up. A really nice venue and room, and great food.
There was no doubt that the instructor knew exactly what he was talking about, and even the simplest questions were answered gladly, without anyone being made to feel stupid.
A lovely, cozy place where the receptionist, the kitchen and the instructors make you feel at home. A good setting makes for good learning. Really good food that helps round out the whole experience of taking a course at SuperUsers.
Really happy with the venue and the stay over in the horse stable. I'll see if I can come back here for the next course I take. A really beautiful building, and great to experience a place like this. A fantastic place to hold a course.
