Home/Training/Certified Ethical Hacker

Programme Detail

Certified Ethical Hacker

The Certified Ethical Hacker programme develops comprehensive ethical-hacking knowledge and practical offensive-security skills. Learners follow a structured methodology...

Enquire about this programme Back to catalogue

Ethical HackingRegistration Open

Programme overview

The Certified Ethical Hacker programme develops comprehensive ethical-hacking knowledge and practical offensive-security skills. Learners follow a structured methodology to discover, analyse, exploit, and report vulnerabilities across systems, networks, applications, wireless, mobile, IoT, operational technology, and cloud environments. Participants will practise authorised security testing in controlled environments, moving from planning and discovery to technical validation, evidence capture, risk analysis, and professional reporting.

Programmes can be delivered via

HRD Corp Claimable

Yayasan Peneraju aligned

EC-Council

At a glance

Course code: EC-014
Provider: EC-Council
Category: Ethical Hacking
Status: Registration Open
Duration: 5 days
Price: RM 6,200 (Lite) / RM 7,200 (Elite)

What participants should gain

Apply an end-to-end ethical-hacking methodology
Perform reconnaissance, scanning, enumeration, and vulnerability analysis
Exploit and validate weaknesses in systems, networks, and applications
Assess wireless, mobile, IoT, OT, and cloud attack surfaces
Document findings and recommend effective remediation

Participant readiness

Strong understanding of TCP/IP, operating systems, and networking
At least two years of information-security experience is recommended for direct exam eligibility
Previous cybersecurity training such as CCT, Network+, or Security+ is beneficial

Who this course is for

Ethical hackers, penetration testers, red-team members, security consultants, and assessors
Network, application, cloud, or security professionals developing offensive-testing capability
Professionals working only within formally authorised and controlled testing environments

How the course is delivered

This programme will be conducted through interactive lectures, demonstrations, guided labs in isolated environments, controlled attack scenarios, evidence collection, group discussions, reporting exercises, and a final practical assessment.

Course outline

Module and topic breakdown

Module 1: Introduction to Ethical Hacking

Learn the fundamentals and key issues in information security, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Module 2: Foot printing and Reconnaissance

Learn how to use the latest techniques and tools for footprinting and reconnaissance, a critical pre-attack phase of ethical hacking

Module 3: Scanning Networks

Learn different network scanning techniques and countermeasures.

Module 4: Enumeration

Learn various enumeration techniques, including Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits and associated countermeasures

Module 5: Vulnerability Analysis

Learn how to identify security loopholes in a target organization's network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools are also included.

Module 6: System Hacking

Learn about the various system hacking methodologies used to discover system and network vulnerabilities, including steganography, steganalysis attacks, and how to cover tracks.

Module 7: Malware Threats

Learn about different types of malware (Trojan, viruses, worms, etc.), APT and fileless malware, malware analysis procedures, and malware countermeasures

Module 8: Sniffing

Learn about packet sniffing techniques and their uses for discovering network vulnerabilities, plus countermeasures to defend against sniffing attacks.

Module 9: Social Engineering

Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.

Module 10: Denial-of-Service

Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, plus the tools used to audit a target and devise DoS and DDoS countermeasures and protections.

Module 11: Session Hijacking

Learn the various session-hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

Module 12: Evading IDS, Firewalls, and Honeypots

Learn about firewalls, intrusion detection systems (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.

Module 13: Hacking Web Servers

Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.

Module 14: Hacking Web Applications

Learn about web application attacks, including a comprehensive hacking methodology for auditing vulnerabilities in web applications and countermeasures

Module 15: SQL Injection

Learn about SQL injection attack techniques, evasiontechniques, and SQL injection countermeasures

Module 16: Hacking Wireless Networks

Learn about different types of encryption, threats, hacking methodologies, hacking tools, security tools, and countermeasures for wireless networks

Module 17: Hacking Mobile Platforms

Learn mobile platform attack vectors, Android and iOS hacking, mobile device management, mobile security guidelines, and security tools.

Module 18: IoT Hacking

Learn different types of Internet of Things (IoT) and operational technology (OT) attacks, hacking methodologies, hacking tools, and countermeasures.

Module 19: Cloud Computing

Learn different cloud computing concepts, such as container technologies and serverless computing, various cloud computing threats, attacks, hacking methodologies, and cloud security techniques and tools.

Module 20: Cryptography

Learn about encryption algorithms, cryptography tools, Public Key Infrastructure (PKI), email encryption, disk encryption, cryptography attacks, and cryptanalysis tools.

Assessment and completion

Continuous knowledge checks and facilitator feedback throughout the programme
Completion of guided exercises, scenarios, labs, or case-study activities applicable to the course
Final review or practical activity to confirm understanding of the stated course objectives
Official EC-Council examination and certification requirements depend on the selected training package and current exam version

Availability

This programme has a public intake path. Use the enquiry form below to confirm the next available session or a private cohort.

Programme enquiry

Discuss pricing, delivery, or corporate customisation

Use this form to confirm availability, request pricing clarification, or discuss a private cohort for your organisation.