CEH-V13 - Ethical Hacking (CEH) V13 Modules and Exam Details

Sep 2, 2026

CEH-V13 course overview covers a complete ethical hacking lifecycle from fundamentals and legal considerations to hands-on techniques across networks, systems, web, wireless, mobile, IoT/OT, cloud, and cryptography. It details pre-attack recon methods, scanning and enumeration, vulnerability analysis, system hacking with evasion and track-covering concepts, malware threats and analysis, and traffic interception defenses. It also includes social engineering, DoS/DDoS, session hijacking, IDS/firewall/honeypot evasion, SQL injection, and exam information with question volume, duration, formats, and passing scores.

LanguageEnglish

CategoryExam

FormatPDF

Pages5

Reading Time13 min

AccessFree to download

Modules Overview

Introduction to Ethical Hacking

Foot Printing and Reconnaissance

Scanning Networks and Enumeration

Vulnerability Analysis

System Hacking and Malware Threats

Sniffing and Social Engineering

Denial-of-Service and Session Hijacking

IDS/Firewalls/Honeypots Evasion

Web Servers and Web Applications

SQL Injection

Wireless, Mobile, IoT/OT, and Cloud Hacking

Cryptography

Exam Details

| Module \# | Module Topic | Description | | --- | --- | --- | | Module 01 | Introduction to Ethical Hacking | Learn the fundamentals and key issues in information security, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures | | Module 02 | Foot Printing and Reconnaissance | Learn how to use the latest techniques and tools for foot printing and reconnaissance, a critical pre-attack phase of ethical hacking | | Module 03 | Scanning Networks | Learn different network scanning techniques and countermeasures. | | Module 04 | Enumeration | Learn various enumeration techniques, including Border | | | | Gateway Protocol (BGP) and Network File Sharing (NFS) exploits and associated countermeasures. | | --- | --- | --- | | Module 05 | Vulnerability Analysis | Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools are also included | | Module 06 | System Hacking | Learn about the various system hacking methodologies used to discover system and network vulnerabilities, including steganography, steganalysis attacks, and how to cover tracks. | | Module 07 | Malware Threats | Learn about different types of malware (Trojan, viruses, worms, etc. ), APT and fileless malware, malware analysis procedures, and malware countermeasures. | | Module 08 | Sniffing | Learn about packet sniffing techniques and their uses for discovering network vulnerabilities, plus countermeasures to defend against sniffing attacks | | Module 09 | Social Engineering | Learn social engineering concepts and techniques, including how to identify theft attempts, audit humanlevel vulnerabilities, and suggest social engineering countermeasures. | | Module 10 | Denial-of-Service | Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, plus the tools used to audit a target and devise DoS and DDoS countermeasures and protections. | | Module 11 | Session Hijacking | Learn the various session-hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures. | | Module 12 | Evading IDS, Firewalls, and Honeypots | Learn about firewalls, intrusion detection systems (IDS), and honeypot evasion techniques; the tools used to audita network perimeter for weaknesses; and countermeasures. | | Module 13 | Hacking Web Servers | Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures. | | Module 14 | Hacking Web Applications |
Learn about web application attacks, including a comprehensive hacking methodology for auditing vulnerabilities in web applications and countermeasures. | | --- | --- | --- | | Module 15 | SQL Injection | Learn about SQL injection attack techniques, evasion techniques, and SQL injection countermeasures. | | Module 16 | Hacking Wireless Networks |
Learn about different types of encryption, threats, hacking methodologies, hacking tools, security tools, and countermeasures for wireless networks | | Module 17 | Hacking Mobile Platforms | Learn mobile platform attack vectors, Android and iOS hacking, mobile device management, mobile security guidelines, and security tools. | | Module 18 | IoT and OT Hacking | Learn different types of Internet of Things (IoT) and operational technology (OT) attacks, hacking methodologies, hacking tools, and countermeasures. | | Module 19 | Cloud Computing | Learn different cloud computing concepts, such as container technologies and server less computing, various cloud computing threats, attacks, hacking methodology, and cloud security techniques and tools. | | Module 20 | Cryptography | Learn about encryption algorithms, cryptography tools, Public Key Infrastructure (PKI), email encryption, di

FAQs

What topics are included in the CEH-V13 modules?

The modules cover ethical hacking fundamentals, recon and scanning, enumeration, vulnerability analysis, system hacking, malware, sniffing, social engineering, DoS/DDoS, session hijacking, IDS/firewall/honeypot evasion, and attacks on web servers and web applications, plus wireless, mobile, IoT/OT, cloud, and cryptography.

How are the CEH-V13 exams structured?

The knowledge exam uses multiple-choice questions with 125 questions and a 4-hour duration, while the practical exam uses iLabs Cyber Range with 20 practical challenges and a 6-hour duration.

What exam score range is required to pass?

The passing score ranges from 60 percent to 85 percent, depending on the evaluation criteria shown in the exam details.

Sep 2, 2026

Uploaded by Emma Wilson