CEH v13 Training in India

Security fundamentals, the five phases of hacking, hacker and attack classes, the Cyber Kill Chain and MITRE ATT&CK, plus the compliance framing behind authorised testing.

You practise Frame an engagement legally and map an attack to a recognised kill-chain stage.

Passive and active intelligence gathering — WHOIS and DNS, search-engine and social-media OSINT, competitive intelligence, and AI-assisted reconnaissance.

You practise Build an accurate external attack-surface picture before touching a target.

Host discovery, port and service scanning, OS fingerprinting, and evading scan detection.

You practise Run and interpret a scan rather than dumping raw tool output.

Pulling usernames, shares and service detail via NetBIOS, SNMP, LDAP, NTP, SMTP and DNS.

You practise Turn open ports into named users, shares and versions worth attacking.

Vulnerability classification, CVSS scoring and scanner operation — with emphasis on reading the output rather than forwarding it.

You practise Separate a real finding from scanner noise and score it defensibly.

Password attacks, privilege escalation, execution, hiding artefacts and clearing logs.

You practise Chain a foothold into privileged access on Windows and Linux.

Trojans, viruses, worms, fileless malware, APT behaviour, and the basics of static and dynamic analysis.

You practise Recognise malware behaviour and describe it in an incident context.

Packet capture, ARP poisoning, MAC flooding and DNS spoofing — and how defenders detect each.

You practise Capture and read traffic, and explain the detection that catches it.

Pretexting, phishing, impersonation, insider threat and human-layer countermeasures.

You practise Design an authorised phishing test and brief the awareness fix.

DoS and DDoS techniques, botnets, amplification and mitigation approaches.

You practise Explain availability risk without running destructive tests on live systems.

Application and network-level hijacking, token theft, replay attacks and defences.

You practise Identify weak session handling and prove impact safely.

Detection-evasion techniques, and how defenders spot them being used.

You practise Test whether monitoring actually fires — the purple-team half of CEH.

Server misconfiguration, patch-management failure, and web-server attack methodology.

You practise Assess the server layer beneath an application.

The web application attack surface — authentication, authorisation, input handling and the OWASP-aligned flaw classes.

You practise Work a web app methodically instead of scanning and hoping.

Injection types, detection, exploitation, and parameterisation as the real defence.

You practise Find, prove and correctly remediate injection.

Wi-Fi encryption weaknesses, rogue access points and wireless attack tooling.

You practise Assess a corporate wireless deployment.

Android and iOS attack surface, mobile malware, MDM and application-layer flaws.

You practise Reason about mobile risk beyond the app binary.

IoT and OT protocols and architecture, ICS/SCADA exposure, and the safety constraints that make OT testing different.

You practise Understand why OT testing is not IT testing with different ports.

Cloud service models, container and serverless concerns, misconfiguration and shared-responsibility boundaries.

You practise Locate the customer's half of the shared-responsibility line.

Algorithms, PKI, encryption in transit and at rest, cryptanalysis and crypto-attack classes.

You practise Judge whether a control is genuinely protecting data.