Certified Ethical Hacking
(CEH) course
By Eng. Mohab mustafa
Who am I
Mohab Mustafa Fathy
Cyber security engineer specialized in network penetration
testing and digital forensics
• Education: BS.C in information security and digital forensics
• Certifications: EC-Council CEH, EC-Council CTIA, Practical Ethical hacking (PEH),
Belkasoft Certified Mobile forensics investigator, EC-Council Mastering Digital
Forensics, CCNA R&S, CCNA Security, HCIA R&S, HCIA Security
• Experience: 6+ Years
• My blog: Welcome | 0xK3rypt0n blog ([Link])
• YouTube channel: [Link]
Course outline
• Chapter 1: Introduction to Ethical Hacking
• Chapter 2: Footprinting and Reconnaissance
• Chapter 3: Scanning Networks
• Chapter 4: Enumeration
• Chapter 5: Vulnerability Analysis
• Chapter 6: System Hacking
• Chapter 7: Malware Threats
• Chapter 8: Sniffing
• Chapter 9: Social Engineering
• Chapter 10: Denial-of-Service (DoS)
Course outline
• Chapter 11: Session Hijacking
• Chapter 12: Evading IDS, Firewalls, and Honeypots
• Chapter 13: Hacking Web Servers
• Chapter 14: Hacking Web Applications
• Chapter 15: SQL Injection
• Chapter 16: Hacking Wireless Networks
• Chapter 17: Hacking Mobile Platforms
• Chapter 18: IoT and OT Hacking
• Chapter 19: Cloud Computing
• Chapter 20: Cryptography
Module 1 : introduction to ethical hacking
Part 1 : introduction
What is hacking?
• Hacking refers to exploiting system vulnerabilities and compromising
security controls.
• A hacker attempts to attack one of the pillars of information security.
Pillars of information security
Security attacks
Classification of attacks
Security attacks
• Any security attack is an attempt to compromise one of the security
pillars.
Types of security approaches
• There are two types of security approaches
• Defensive security: measures to protect information systems.
• Offensive security: attacking system to identify possible vulnerabilities
(for example Ethical hacking)
What is ethical hacking?
• Attacking a system in order to secure it.
• In Ethical hacking a security engineer attempts to simulate an attack
on system in order to identify possible vulnerabilities and mitigate
them.
• Best way to secure a system is to think like an attacker.
• But be aware ethical hacking requires system admin permission.
Ethical hacking process
• In ethical hacking the security engineer do same steps as the attacker,
the only difference is the motivation and goal.
Ethical hacking steps
Ethical hacking vs. penetration testing vs.
vulnerability analysis
• Ethical hacking is the same as penetration testing.
• In Vulnerability analysis we only search for vulnerabilities (we don’t
exploit it).
• In Ethical hacking we attempt to exploit system vulnerabilities.
Ethical hacker skills
• Ethical hacking is not about the tools used.
• You must have these prerequisite skills
• Networking
• Operating system administration (Epically Linux)
• Programming (Python, C++, C# …..)
Remember stay in ethical boundaries !!!
• 2018 لسنة175 قانون مكافحة جرائم تقنية المعلومات رقم
• [Link]
Part 2 : Networking and Linux refresh
What is a computer network
• Set of interconnected devices.
• End host: computer devices at the end of the network edges.
• Intermediary devices: networking devices that makes up the network,
for example Routers, Switches, firewalls, IDS/IPS.
OSI Model
• Logical model that describes how
data is sent and Received in computer
networks.
Network protocols
• A protocol is a set of rules that defines how a computer will interact
with the server.
• Common protocols are
• DNS
• FTP
• HTTP
• SSH
• SSL/TLS
Port number
• A number ranges from 0 – 65535
• Each running protocol is assigned a unique port number.
How to tell if a port number is open ?
What is OS
• Operating system is a software that connects your computer software
with it’s physical hardware.
• Common Operating systems are:
• Linux
• Windows
• Mac OS X (Linux based)
• IOS (Linux based)
• Android (Linux based)
Why linux in Ethical Hacking
• An open source OS that gives you much control on the Underling
layers.
• Common Linux distros are:
• Ubuntu
• Fedora
• Debian
• Kali Linux
• Parrot sec os
• SIFT
What is virtualization?
• Running multiple OS (guest OS) instances on top of a host OS.
• Virtualization alternative:
• Dual booting
Effective note keeping
• Use a noting application like Cherrytree and take notes of your whole
process.
Thanks