Ethical Hacking Training in Chennai

Syllabus for Ethical Hacking Training in Chennai

PART 1: Ethical Hacking – An Overview

• What is Information Security?
• Different Types of Security Attacks
• What do you know about Information Security Threats?
• Do you know about Attack Vectors?
• Deep Dive on Hacking Concepts
• Different Types and Phases of Hacking

PART 2: More About Ethical Hacking

• What do you know about Information Security Controls?
• Physical Security
• How will you perform Incident Management?
• What is Penetration Testing?
• Deep Dive on Information Security Laws
• An Overview of Information Security Standards

PART 3: FootPrinting and Reconnaissance

• Deep Dive on Footprinting Concepts
• What do you know about Footprinting Methodology?
• Different Types of Footprinting Tools
• How to manage Footprinting?
• What do you know about Footprinting Penetration Testing?

PART 4: How to Scan Networks?

• Deep Dive on Network Scanning
• Do you know about CEH Scanning methods?

• PART 5: System Hacking

• How to evaluate info for System Hacking?
• Goals of System Hacking
• Deep Dive on CEH Hacking Methodology (CHM)
• Different Steps to perform CEH System Hacking
• What do you know about Hiding Files?
• Deep Dive on Covering Tracks
• What is Penetration Testing?

PART 6: Deep Dive on Sniffing

• An Overview of Sniffing Concepts
• Different Types of Sniffing
• What do you know about MAC and DHCP attacks?
• Deep Dive on ARP Poisoning and Spoofing Attack?
• What is DNS Poisoning?
• Sniffing Tools
• Deep Dive on Wireshark
• An Overview of Packet Sniffing Tool
• What do you know about Capsa Network Analyser?

PART 7: What do you know about Social Engineering?

• Deep Dive on Social Engineering
• Different methods of Social Engineering
• What is Impersonation on Social Networking Sites?
• Deep Dive on Identity Theft

PART 8: Denial of Service (DoS)

• What is DoS?
• Deep Dive on DoS
• Different methods of attack in DoS and DDoS
• What do you know about Botnets?
• DDoS Case Study with real time examples
• Different Types of DoS and DDoS Attack Tools
• Deep Dive on Protection Tools
• Penetration Testing for DoS and DDoS Attack

PART 9: What do you know about Session Hijacking?

• An Overview of Session Hijacking
• Deep Dive on App and Network Level Session Hijacking
• Different Types of Session Hijacking Tools
• Do you know about Safety Measures?
• How to Perform Penetration Testing?

PART 10: How to Hack WebServers?

• Deep Dive on Web Server
• What do you know about Web Server Attacks?
• Do you know about Web Server Hacking Methodology?
• Different Types of Tools for Web Server Hacking
• What’s the Safety Measures to be followed?
• What do you know about Security Tool?
• Deep Dive on Penetration Testing

PART 11: SQL Injection

• Deep Dive on SQL Injection
• Different Types of SQL Injection
• What do you know about SQL Injection Methodology?
• Different Types of SQL Injection Tools
• Do you know about Evasion methods?
• What’s the Safety Measures to be followed?

PART 12: How to Hack Wireless Networks?

• What is Wireless Network?
• Deep Dive on Wireless Encryption
• Wireless Threats
• Deep Dive on Wireless Hacking Methodology
• Different Types of Wireless Hacking Tools
• What do you know about Bluetooth Hacking?
• Safety Measures
• Deep Dive on Wi-fi Penetration Testing
• Different Types of Wireless Security Tools

PART 13: How to Hack Mobile Platforms?

• Deep Dive on Mobile Platform Attack Vectors
• How to Hack Android OS?
• Do you know to hack iOS?
• How to hack windows phone and blackberry?
• Deep Dive on Mobile Device Management (NIDM)
• What do you know about Mobile Security Guidelines?
• Different Types of Mobile Security Tools
• More about Penetration Testing

PART 14: How to hack Web Apps?

• Deep Dive on Web Application
• What do you know Web App Threats?
• Do you know about Web App Hacking Methodology?
• Different Types of Tools for Web App Hacking
• What do you know about Safety Measures?
• Deep Dive on Security Tool
• How to perform Penetration Testing?
• What do you know Web App Perpetration Testing Framework?

PART 15: How to Evade IDS, Firewalls and HoneyPots?

• Deep Dive on IDS, Firewalls and HoneyPots
• How to Evade IDS and Firewalls?
• Different Types of Tools to Evade IDS and Firewalls
• How to detect HoneyPots?
• Safety Measures
• How to perform Penetration Testing?

PART 16: Cloud Computing

• Deep Dive on Cloud Computing
• What do you know about cloud computing threats and attacks?
• Deep Dive on Cloud Security Tools
• Safety Measures

PART 17: Deep Dive on Cryptography

• Case Study about Heartbleed
• Case Study about Poodlebleed
• Deep Dive on Cryptography
• What  do you know about Encryption Algorithms?
• Different Types of Cryptography Tools
• Deep Dive on Public Key Infrastructure (PRI)
• What do you know about Email Encryption?
• Deep Dive on Disk Encryption
• An Overview of Cryptography Attacks
• Deep Dive on Cryptanalysis Tools

Certified Ethical Hacking by EC Council

Part 1: Introduction to Ethical Hacking

• Understanding Information Security
• Terminologies and Elements of Securing Information
• Balancing Security, Functionality, and Usability
• Exploring Threats to Information Security
• Types of Information Security Threats and System Attacks
• Hacking Fundamentals
• What is Ethical Hacking and Its Need
• Types of Hackers
• Breakdown of Hacking Phases
• Skills of Ethical Hackers
• Information Security Controls
• Enterprise Information Security Architecture (EISA)
• Network Security Zones
• Risk Assessment and Management
• Information Security Controls
• Enterprise Information Security Architecture
• Network Security Zones
• Implementing Network Security Controls
• Threat Modeling
• Incident Response and Management
• Handling Incidents
• Security Incident and Event Management (SIEM)
• User Behavior Analytics (UBA)
• Data Backup and Recovery
• Security Testing and Compliance
• Penetration Testing
• Concepts and Significance
• Phases and Methodology
• Blue Teaming and Red Teaming
• Compliance and Legal Framework
• Laws and Standards
• PCI-DSS, HIPAA, SOX, FISMA, DMCA
• Advanced Cybersecurity Topics
• AI and ML in Cybersecurity
• Network Security Controls
• Data Protection Strategies

Part 2:  Footprinting and Reconnaissance

• Understanding Footprinting
• Footprinting using Whois
• Several Types of Footprinting
• Website Footprinting
• Email Footprinting
• DNS Footprinting
• Network Footprinting
• Tools for Footprinting (Maltego, Recon-ng, FOCA, Recon-Dog)
• Google Hacking Techniques
• Footprinting Countermeasures
• Footprinting using Penetration Testing

Part 3:  Network Scanning

• Concepts of Network Scanning (TCP/IP)
• Tools and Techniques for Scanning (Nmap, Hping2)
• Banner Grabbing
• Network Diagrams and Mapping Tools
• Scanning using Penetration Testing

Part 4: Basics of Enumeration

• Understanding Enumeration Concepts and Methods
• NTP Enumeration
• NetBIOS Enumeration
• LDAP Enumeration
• SMTP and DNS Enumeration
• SNMP Enumeration
• Enumeration Strategies and Techniques
• Enumeration using Penetration Testing

Part 5: Vulnerability Analysis

• Understanding Vulnerability Assessment
• Vulnerability Research
• Types of Vulnerability Assessment
• Vulnerability Scoring Systems (CVSS, CVE, NVD)
• Vulnerability Assessment Tools
• Vulnerability Scanning Solutions
• Evaluating Vulnerability Assessment Approaches
• Functionality of Vulnerability Scanning Solutions
• Crafting and Analysing Vulnerability Assessment Reports

Part 6:  Basics of System Hacking

• Exploring System-Hacking Concepts
• CEH Hacking Methodology (CHM)
• Objectives of System Hacking
• Password Cracking
• Types of Password Attack Techniques
• Password Retrieval Utilities
• NTLM Authentication Process
• Kerberos Authentication Process
• Password Salting Mechanism
• Protecting Against LLMNR/NBT-NS Poisoning
• Privilege Escalation Types and Strategies (DLL, Vulnerability, Dylib Hijacking)
• Executing Defence Applications
• File Concealment (Rootkuts, NTFS Data Stream)
• Covering Tracks
• Auditpol for Disabling Auditing
• Log Clearance Methods
• Manual Event Log Purging
• Concealing BASH Shell Tracks
• Camouflaging Network Activity
• Obscuring Operating System Traces

Part 7:  Malware Threats

• Understanding Malware Concepts
• Distribution Techniques Employed by Attackers
• Elements of Malicious Software
• Trojan Concepts (Trojan Wrappers, Crypters)
• Virus and Worm Concepts
• Phases in a Virus Lifecycle
• Virus Functionality
• Indicators of Virus Presence
• Malware Analysis
• ZeuS/Zbot Trojan Analysis
• Analyzing WannaCry Virus

Part 8: Sniffing Fundamentals

• Understanding Sniffing Concepts (OSI, SPAN)
• Tools and Techniques for Sniffing (DHCP)
• Understanding Honeypots, Firewalls, IDS

Part 9:  Social Engineering

• Social Engineering Techniques (Human-centric, computer-centric, and mobile-centric)
• Insider Threats
• Detecting Phishing Emails

Part 10: DoS and DDoS Attacks

• Understanding DoS/DDoS Attacks and Botnets
• Methods Used in DoS/DDoS Offensives
• The UDP Flood Attack
• ICMP Flood Attack Mechanism
• Ping of Death and Smurf Attacks
• SYN Flood Attack Strategy
• The Fragmentation Attack
• Denial-of-Service (DRDoS)
• Tools and Protective Measures
• DoS/DDoS Penetration Testing for DDoS Attacks

Part 11:   Session Hijacking

• Understanding Session Hijacking
• Session Hijacking at the Application Level
• Categories of Session Hijacking
• Session ID Compromise through Client-Side Attacks
• Cross-Site Scripting (XSS)
• Cross-Site Request Forgery (CSRF)
• Session Hijacking at the Network Level
• IP Spoofing and Source-Routed Packets
• RST Hijacking
• Blind Session Hijacking
• Session Hijacking in TCP/IP, UDP
• Tools and Protective Measures for Session Hijacking

Part 12: Hacking Web Servers and Understanding Web Application Hacking

• Understanding Web Server Operations and Web Applications
• Architecture (Open Source Web Servers, IIS Web Servers)
• Causes and Consequences of Web Server Compromises
• Web Server Vulnerabilities and Attacks (MiTM, Phishing, SSH Brute)
• Tools for Web Server Offensives and Web Application Hacking

Part 13: Fundamentals of SQL Injection

• Understanding SQL Injection
• Insights into HTTP POST Requests
• Comprehending Regular SQL Queries
• Grasping the Structure of an SQL Injection Query
• SQL Injection Strategy and Utilities
• Techniques and Preventive Measures to Evade Detection

Part 14: Wireless Network Exploitation

• Wireless Fundamentals
• Wireless Terminologies
• Types of Wireless Networks
• Wireless Encryption
• WEP, WPA, and WPA2 Differences
• The Pitfalls of WEP Encryption
• Tools for Wireless Intrusion

Part 15:  Mobile Platform Exploitation

• Mobile Platform Vulnerabilities and Security Tools
• Anatomy of Mobile Assaults
• Mobile Attack Vectors and Platform Vulnerabilities
• Challenges with App Sandboxing
• Android OS and iOS Exploitation
• Android Rooting Techniques
• Network Access Control via NetCut
• Mobile Hacking with zANTI
• iOS Trojans, Apple’s iOS
• Mobile Espionage Software and Device Management

Part 16:  IoT Exploitation Fundamentals

• Understanding IoT
• IoT Vulnerabilities and Threats
• OWASP’s Top 10 IoT Vulnerabilities
• Scoping Out IoT’s Attack Surface
• IoT Attacks Across Diverse Sectors
• IoT Hacking Methodology and Mitigation Strategies

Part 17:  Basics of Cloud Computing and Cryptography Essentials

• Cloud Deployment Concepts and Models
• Cloud Computing Threats and Attacks
• Domain Name System (DNS) Attacks
• Side-Channel Attacks or Cross-guest VM Breaches
• SQL Injection Attacks
• Cryptanalysis Attacks
• Wrapping Attack
• Understanding Cryptography
• Encryption Techniques and Cryptography Utilities (DES, AES, RSA, PKI)

Ethical Hacking Certification Training

Professionals that handle IT security across infrastructure that spans physical, cloud, and hybrid environments are the perfect candidates for the CEH Certification course. You should pursue the CEH certification once you better understand the ethical hacker’s function. The moral hacking Training in Chennai will assist you in learning about and comprehending network and cyber risks. The Certified Ethical Hacker (CEH) credential can be obtained by understanding computer security. Your cybersecurity knowledge and competence, as well as any cybersecurity-related specialties, are validated by the EC- Council certification exam. You may pass the 312-50 test by taking the Certified Ethical Hacker v12 training course in BITA. 

• Certified Ethical Hacker (CEH)
• CompTIA Security+