Ethical Hacker's Certification Guide (CEHv11) A comprehensive guide on Penetration Testing including Network Hacking, Social Engineering, and Vulnerability Assessment Mohd Sohaib www.com FIRST EDITION 2022 Copyright © BPB Publications, India ISBN: 978-93-91392-161 All Rights Reserved. No part of this publication may be reproduced, distributed or transmitted in any form or by any means or stored in a database or retrieval system, without the prior written permission of the publisher with the exception to the program listings which may be entered, stored and executed in a computer system, but they can not be reproduced by the means of publication, photocopy, recording, or by any electronic and mechanical means. LIMITS OF LIABILITY AND DISCLAIMER OF WARRANTY The information contained in this book is true to correct and the best of author’s and publisher’s knowledge. The author has made every effort to ensure the accuracy of these publications, but publisher cannot be held responsible for any loss or damage arising from any information in this book.
All trademarks referred to in the book are acknowledged as properties of their respective owners but BPB Publications cannot guarantee the accuracy of this information.com Dedicated to Late Mrs. Shaheen Atique and Dr. Mohd Atique You guys have given me all that I could have wished for About the Author Mohd Sohaib is a digital security enthusiast and a Certified Ethical Hacker, having been associated with the cybersecurity industry in various capabilities ranging from taking seminars and workshops to bug bounties to educating people from different walks of life about the nature of the digital world and how to keep themselves safe. He is also the co-author of a paper titled “Sustainable Security of Information Systems” which won the award for best paper on Emerging Trends in Information/Network Security conference (ETINS).
Sohaib has authored papers on Game Theory with focus on group dynamics and digital interactions. He also collaborates frequently with educational institutions to develop curriculum and practical labs for their ethical hacking and security programs. With a decade of experience in software development and design, he is currently into building highly scalable and secure solutions for the modern digital world. About the Reviewer Arun Soni is an internationally acclaimed author and cybersecurity expert from Chandigarh, India.
He has authored 159 books on Information Technology, Artificial Intelligence and Cybersecurity for schools/colleges and general public. His books are widely read in India and abroad by millions of students. He has the distinction of entering the Limca Book of Records under the category ‘Most computer books written at the age of 37’. He also holds many other national and international records.
He is also a Certified Ethical Hacker (CEH) from EC Council (US) and a Cybersecurity Consultant, who is working for the cause of spreading awareness about cybersecurity. For his contribution towards computer education and cybersecurity, he has been admired and has received media coverage by many major news portals, magazines, newspapers such as Indian Express, The Tribune, Dainik Bhaskar, Yahoo News, Economics Times, Business Standard and Rediff. He has also appeared as an expert commentator on several nationwide radio and TV channels. Acknowledgement The journey of writing this book has been nothing short of a roller coaster, and I was lucky enough to have the best of people around me.
It would all not have been possible without my ever understanding wife, Nazrana. Thank you for your constant reminders, encouragements and critiques. Had it not been for you, I would still be on the first chapter. I would have loved to thank my mom, Late Mrs.
I know you would not have read the book, but you would still be proud of it. My dad, Dr. Mohd Atique, has been a pillar for me. I would forever be grateful to you for believing in, letting me chase my dreams and being there to catch me in all my falls.
A special mention to Rinkish Khera, for re-igniting the security enthusiast in me. Thank you for filling in as packers and movers time and again, and for all the free labor. You will still not be paid though. I cannot thank the BPB team enough for their support and understanding, and the whole review team.
Team patience and diligence throughout the process has been commendable. Preface Simplifying digital security concepts is perhaps the most important step in providing sustainable solutions for cybersecurity. It is also one of the harder ones to crack. The complexity of the digital world has increased exponentially and with advancements like cloud, digital currencies and IoT, stakes are at all-time high.
This book focuses on the key aspects of cybersecurity and penetration testing, while keeping in mind the need of getting the point across to even the most naïve user. It presents a concise and to-the-point approach towards understanding and implementing some of the most typical hacking measures and their countermeasures. The book is divided into three sections, each aiming at different stages of expertise in the field. The first section prepares the users for what the world of cybersecurity is all about.
It also helps the readers evaluate the prior knowledge and hence decide upon the pace of learning and early identification of the areas of improvement. It also takes the readers through requirements and curriculum of CEH, one of the most reputed and comprehensive cybersecurity certification. The second section takes the users through various aspects of digital systems, their security, penetration testing, hacking methodologies, tools and mitigation of the shortcomings in the security landscape. It deals with the theoretical concepts along with practical examples and scenarios to help the readers visualize the systems and understand the risks and solutions.
The section covers topics like reconnaissance and social engineering in their most trivial form. The networking basics are aptly covered to eliminate any pre-requisites to understanding the concepts and hacks discussed. We have also taken a very basic approach towards seemingly complicated topics like cryptography, IoT, containers and IIoT, treating them in their most basic forms and building solutions from these ground up. The third section helps pave a future path for the readers in the cybersecurity industry or application of the acquired knowledge in any of the applied fields.
It also takes the users through some of the peripheral, yet important topics of cyber laws and the career paths for a security professional. It additionally contains practical exercises based on the concepts covered in section two. These also aim to explain the use of readily available tools as well as the importance of improvisation when it comes to hacking or securing a digital system. The readers will be familiarized with some of the most interesting hacking tools like nmap, burpsuite, social engineering toolkit, Metasploit, etc.
The book concludes with two evaluation sheets based on CEH v11 exam. It contains actual questions asked in the exam along with their solutions. This completes the cycle of the readers being able to evaluate their knowledge and understanding of the concepts as well as their preparation for the actual certification exams. Downloading the coloured images: Please follow the link to download the Coloured Images of the book: https://rebrand.ly/5834c1 Errata We take immense pride in our work at BPB Publications and follow best practices to ensure the accuracy of our content to provide with an indulging reading experience to our subscribers.
Our readers are our mirrors, and we use their inputs to reflect and improve upon human errors, if any, that may have occurred during the publishing processes involved. To let us maintain the quality and help us reach out to any readers who might be having difficulties due to any unforeseen errors, please write to us at : errata@bpbonline.com Your support, suggestions and feedbacks are highly appreciated by the BPB Publications’ Family. Did you know that BPB offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at business@bpbonline.com for more details.
At you can also read a collection of free technical articles, sign up for a range of free newsletters, and receive exclusive discounts and offers on BPB books and eBooks. BPB is searching for authors like you If you're interested in becoming an author for BPB, please visit www.com and apply today. We have worked with thousands of developers and tech professionals, just like you, to help them share their insight with the global tech community. You can make a general application, apply for a specific hot topic that we are recruiting an author for, or submit your own idea.
The code bundle for the book is also hosted on GitHub at In case there's an update to the code, it will be updated on the existing GitHub repository. We also have other code bundles from our rich catalog of books and videos available at Check them out! PIRACY If you come across any illegal copies of our works in any form on the internet, we would be grateful if you would provide us with the location address or website name. Please contact us at business@bpbonline.com with a link to the material. If you are interested in becoming an author If there is a topic that you have expertise in, and you are interested in either writing or contributing to a book, please visit REVIEWS Please leave a review.
Once you have read and used this book, why not leave a review on the site that you purchased it from? Potential readers can then see and use your unbiased opinion to make purchase decisions, we at BPB can understand what you think about our products, and our authors can see your feedback on their book. Thank you! For more information about BPB, please visit Table of Contents 1. Cyber Security, Ethical Hacking, and Penetration Testing Introduction Structure Objectives The Ten Thousand Feet View Cyber Security Free comic strip subscription service Electronic health record service Ethical Hacking Phases of a Hack Penetration testing Conclusion 2. CEH v11 Prerequisites and Syllabus Introduction Structure Objectives Certified Ethical Hacker Version 10 & 11 Prerequisites Modes of study and examination Option 1: ECC Exam voucher Option 2: VUE Exam voucher Conclusion 3.
Self-Assessment Introduction Structure Objectives SECTION 'A' Information Security and Penetration Testing SECTION 'B' EC-Council CEH Answers Conclusion 4. Reconnaissance Introduction Structure Objectives Understanding Reconnaissance Financial Information Technology Stack Workforce and Clientele Operating Environment Network Configurations Web content Conclusion Test Your Understanding Answers 5. Social Engineering Introduction Structure Objectives Social Engineering: The Bookie Story Social Engineering Methodology Social Engineering Techniques Tools of Social Engineering Social Engineering Countermeasures Conclusion Test Your Understanding Answers 6. Scanning Networks Introduction Structure Objectives Anatomy of a Computer Network Live Host Discovery Port Scan and Service Discovery TCP Scan UDP Scan Banner Grabbing Network Mapping Conclusion Test Your Understanding Answers 7.
Enumeration Introduction Structure Objectives Enumeration as a successor to network scan NetBIOS enumeration SNMP Enumeration LDAP enumeration NTP enumeration NTP enumeration commands SMTP enumeration DNS enumeration Conclusion Test Your Understanding Answers 8. Vulnerability Assessment Introduction Structure Objectives Process Overview Residual Risk DevSecOps Conclusion Test Your Understanding Answers 9. System Hacking Introduction Structure Objectives System hacking stages Password cracking Password storage in modern systems Security Account Manager (SAM) NTLM Authentication Kerberos authentication Rainbow tables Backdoor Entry – Trojans Password cracking defense checklist Privilege escalation Horizontal privilege escalation Vertical privilege escalation DLL hijacking Executing application Remote execution tools Hiding files and covering tracks Conclusion Test Your Understanding Answers 10. Session Hijacking Introduction Structure Objectives TCP and Web sessions Network-level session hijacking TCP session hijacking UDP hijacking Application-level session hijacking Countermeasures to session hijacking Conclusion Test Your Understanding Answers 11.
Web Server Hacking Introduction Structure Objectives Web server Tools for web server hacking Conclusion Test Your Understanding Answers 12. Web Application Hacking Introduction Structure Objectives Tools used in web application hacking Conclusion Test Your Understanding Answers 13. Hacking Wireless Networks Introduction Structure Objectives The wireless connectivity Wireless standards 802.