Certified Professional Ethical Hacking C)PEH Certification

Identify tcp flags such as syn, fin, reset, push, and urgent; master nmap scans from connect to idle using os and service versioning across key ports and subnets.

Learn network enumeration techniques using icmp ping, ping options, and idle scan, including ping of death, smurf, fraggle, and syn flood tactics, with banner grabbing via telnet or netcat.

Explore reconnaissance and protocol enumeration in ethical hacking. Learn techniques such as banner grabbing, DNS and LDAP enumeration, and SNMP, with countermeasures like blocking LDAP ports 389 and 636.

This lecture explains rainbow tables, salting to defeat them, and password cracking tools like off crack and ph crack, plus disabling auditing, clearing logs, and steganography.

Explore anonymity tools like Tor and encrypted tunnels, study rootkits that grant undetected access, and examine packet sniffing with Wireshark.

Analyze fragmentation based attacks, including overlapping fragments and teardrop techniques, timeouts, and time to live evasion, and learn how IDS/IPS, firewalls, honeypots, and hardened hosts mitigate these threats.

Explore cross-site scripting, including non-persistent (reflected) and stored (persistent) variants, their browser vectors, and the resulting risks to sessions and data.

Explore web application testing with samurai, analyze sql injection—indirect and direct attacks, including blind injection—embrace defense in depth and common tools like Cain and Abel.

Enable wireless pentesting by using airodump-ng to capture packets and handshake data, then crack wep or wpa with aircrack-ng and dictionary attacks, aided by air replay and cowpat key.

Assess how executable wrappers deliver malware by running combined binaries, and review malware countermeasures, from antivirus and intrusion detection systems to rootkits, file integrity tools, and forensics utilities.

Understand buffer overflow risks and fuzzing that enable code execution through stack corruption, and summarize cryptography fundamentals, including symmetric and asymmetric systems with des, aes, sha, and PKI concepts.

Learn how public key infrastructure and digital signatures secure emails and networks, compare RSA, Diffie-Hellman, El-Gamal, and elliptic-curve schemes, and review SSL, IPsec, and SSH protections.