CEH v13 Course Syllabus 2026

Overview of CEH v13 syllabus structure

I’ve come across a lot of cybersecurity courses, but the Certified Ethical Hacker (CEH) v13 syllabus stands out as a vital resource for anyone keen on ethical hacking.

Covering a broad array of contemporary cybersecurity challenges, it’s split into 20 modules. You’ll get deep insights into various hacking techniques, which are invaluable for protecting digital infrastructures.

The CEH v13 syllabus touches on foundational concepts, advanced attack methods, and even delves into new domains like cloud computing, IoT, and AI. With cyber threats reportedly up by 15% in 2023 (source: Cybersecurity Ventures), gaining expertise through this syllabus can make a real difference.

The CEH certification is recognized by [EC-Council] and it’s not just about understanding hacking techniques; it’s about learning how to apply ethical safeguards to systems.

CEH v13 Syllabus 2026: Module-Wise Detailed Breakdown (All 20 Modules)

Modules 1-5: Foundation modules

Module 1: Introduction to Ethical Hacking

• Overview of current cyber threats
• Ethical hacking vs penetration testing
• Legal aspects of hacking
• Types of hackers: white hat, black hat, grey hat

Estimated Study Time: 6 hours
Difficulty Level: Easy

Module 2: Footprinting and Reconnaissance

• Information gathering techniques
• Identifying network range
• Mapping out target organization

Estimated Study Time: 7 hours
Difficulty Level: Medium

Module 3: Scanning Networks

• Port scanning
• Network discovery tools
• Probing live systems

Estimated Study Time: 8 hours
Difficulty Level: Medium

Module 4: Enumeration

• Network and system enumerations
• Gaining usernames and system info
• Linux/Windows system enumeration

Estimated Study Time: 6 hours
Difficulty Level: Medium

Module 5: Vulnerability Analysis

• Identifying security loopholes
• Tools for vulnerability analysis
• Performing vulnerability scanning

Estimated Study Time: 9 hours
Difficulty Level: Hard

Modules 6-10: Attack techniques

Module 6: System Hacking

• Cracking and bypassing passwords
• Privilege escalation techniques
• Covering tracks

Estimated Study Time: 10 hours
Difficulty Level: Hard

Module 7: Malware Threats

• Understanding different types of malware
• Virus and worm attacks
• Case study: WannaCry attack

Estimated Study Time: 5 hours
Difficulty Level: Medium

Module 8: Sniffing

• Packet sniffing techniques
• Countermeasures to sniffing
• Sniffing detection techniques

Estimated Study Time: 6 hours
Difficulty Level: Hard

Module 9: Social Engineering

• Phishing and its prevention
• Baiting and pretexting attacks
• Case study: Target store breach

Estimated Study Time: 7 hours
Difficulty Level: Medium

Module 10: Denial-of-Service (DoS)

• Types of DoS/DDoS attacks
• Defenses against DoS
• Case study: 2016 Dyn cyberattack

Estimated Study Time: 8 hours
Difficulty Level: Hard

Modules 11-15: Web and network hacking

Module 11: Session Hijacking

• Session hijacking processes
• Countermeasures for hijacking
• Usage of tools like Burp Suite

Estimated Study Time: 6 hours
Difficulty Level: Medium

Module 12: Evading IDS, Firewalls & Honeypots

• IDS, firewall types, and functions
• Penetration testing with Metasploit
• Honeypot evasion methods

Estimated Study Time: 9 hours
Difficulty Level: Hard

Module 13: Hacking Web Servers

• Understanding server vulnerabilities
• Tools for web server attacks
• Preventing server attacks

Estimated Study Time: 7 hours
Difficulty Level: Hard

Module 14: Hacking Web Applications

• SQL injection techniques
• Code injection vulnerability
• Cross-Site Scripting (XSS)

Estimated Study Time: 10 hours
Difficulty Level: Hard

Module 15: SQL Injection

• Types of SQL injection attacks
• Detection methodologies
• Mitigating injection-based attacks

Estimated Study Time: 5 hours
Difficulty Level: Medium

Modules 16-20: Cloud, IoT and AI modules

Module 16: Hacking Wireless Networks

• Breaking WEP/WPA/WPA2 encryptions
• Wi-Fi network sniffing
• Security best practices for Wi-Fi

Estimated Study Time: 8 hours
Difficulty Level: Medium

Module 17: Hacking Mobile Platforms

• Exploiting Android and iOS vulnerabilities
• Trojans for mobile devices
• Mobile security best practices

Estimated Study Time: 6 hours
Difficulty Level: Hard

Module 18: IoT Hacking

• IoT architecture and vulnerabilities
• Attacks on IoT devices
• Securing IoT environments

Estimated Study Time: 5 hours
Difficulty Level: Medium

Module 19: Cloud Computing

• Cloud infrastructure hacking
• Cloud security tools
• Protecting cloud data

Estimated Study Time: 9 hours
Difficulty Level: Hard

Module 20: Cryptographic Attacks

• Principles of cryptography
• Breaking cryptographic algorithms
• Case study: SSL/TLS vulnerabilities

Estimated Study Time: 7 hours
Difficulty Level: Hard

How modules map to the exam?

The CEH v13 exam, a pivotal aspect of EC-Council certification, aligns seamlessly with the modules to ensure all critical skills are well-covered.

According to EC-Council, around 60% of exam questions hinge on attack techniques found in modules 6-10 and 11-15, while foundational learning in modules 1-5 makes up about 20%.

The remaining 20% delves into forward-thinking technologies in modules 16-20, covering AI and IoT.

It’s interesting how this reflects the trend where over 70% of cyber incidents are linked to web platforms (source: Cybersecurity Ventures), making web and network hacking a major focus.

Module Range	Exam Coverage (%)
Modules 1-5	20%
Modules 6-10	35%
Modules 11-15	25%
Modules 16-20	20%

Recommended study order

Strategically tackling the CEH v13 syllabus can really benefit your learning experience. Start with Modules 1-5 to cement your understanding of the fundamental ethical hacking principles. As you gain confidence, leap into Modules 6-10.

These focus on attack techniques, providing essential practical skills. I recommend diving into Modules 11-15 afterward because they cover web and network hacking, which is crucial nowadays.

Lastly, wrap up with Modules 16-20. These address emerging technologies, preparing you for future challenges, especially in cloud, IoT, and AI security.

For even more assistance, check out our detailed guides and resources at 3.0 University Blog, or think about enrolling in the complete CEH v13 course to boost your success rate.

Suggested Study Phase	Modules to Cover
Phase 1	Modules 1-5
Phase 2	Modules 6-10
Phase 3	Modules 11-15
Phase 4	Modules 16-20

 

FAQs

How many modules in CEH v13?

There are 20 detailed modules in CEH v13, each crafted to provide you with the essential knowledge and skills in ethical hacking.

What’s new vs CEH v12 syllabus?

With CEH v13, you’ll find updated modules focusing on AI, IoT, and cloud computing, reflecting the advancements these areas have made since CEH v12.

Which modules are hardest?

If I were to choose, the modules on advanced attack techniques and cryptography, like Modules 6, 12, and 20, tend to be the most challenging because they are quite complex.

Are AI modules in CEH v13?

Absolutely, CEH v13 includes AI-related content, specifically exploring AI’s influence in cybersecurity and ethical hacking within Modules 16-20.

How long to finish the full syllabus?

Typically, it takes between 160 to 180 hours to complete the CEH v13 syllabus, though this varies with individual speed and prior experience.

Ready to dive into all 20 modules?

Explore our tailored courses suited to your learning style at 3.0 University’s CEH v13 Program.