1 What is CEH?

The Certified Ethical Hacker (CEH) by EC-Council is one of the most recognized ethical hacking certifications globally. It demonstrates your understanding of attack techniques, methodologies, and tools used by hackers-so you can defend against them.

CEH v13 (2024) introduces AI-powered hacking techniques, covering how AI is used in both offensive and defensive security operations. The certification covers 20 modules ranging from footprinting to IoT and cloud hacking.

The Good

✓ Globally recognized brand
✓ DoD 8570/8140 compliant
✓ Gets past HR filters
✓ Broad coverage of topics
✓ Master track has practical exam

The Tough

✗ Expensive ($1,199+ just for exam)
✗ Theory-heavy ANSI exam
✗ Mixed community reputation
✗ Requires training or 2yr experience

Honest Take

CEH has a reputation issue in the community. Many pentesters consider it a "checkbox cert" for HR requirements rather than a practical skills cert. That said, it's still highly recognized by employers and often required for DoD/government roles. Know what you're getting: mostly theoretical, with practical labs in the Master track.

2 CEH Tracks

KNOWLEDGE

CEH (ANSI)

125 multiple choice questions
4 hours duration
Tests theoretical knowledge
~$1,199 (exam voucher only)

PRACTICAL RECOMMENDED

CEH Master

CEH (ANSI) + CEH Practical
6-hour hands-on lab exam
20 real-world challenges
Tests actual hacking skills

Pro Tip: If you're getting CEH, go for the Master track. The practical exam actually tests skills and carries more weight with technical employers. The ANSI-only version is mostly for compliance checkboxes.

3 20 Exam Modules

1 Introduction to Ethical Hacking

2 Footprinting & Reconnaissance

3 Scanning Networks

4 Enumeration

5 Vulnerability Analysis

6 System Hacking

7 Malware Threats

8 Sniffing

9 Social Engineering

10 Denial-of-Service

11 Session Hijacking

12 Evading IDS, Firewalls, Honeypots

13 Hacking Web Servers

14 Hacking Web Applications

15 SQL Injection

16 Hacking Wireless Networks

17 Hacking Mobile Platforms

18 IoT & OT Hacking

19 Cloud Computing

20 Cryptography

4 Study Resources

EC-Council Official Training

$2,000 - $3,500+

iLearn self-paced or iWeek live bootcamp. Expensive but comprehensive.

CEH All-in-One - Matt Walker

~$50

The go-to book for CEH prep. Covers all modules with practice questions.

Boson Practice Exams

~$99

Realistic exam simulation. Essential for the multiple-choice format.

TryHackMe / HackTheBox

Free - $15/mo

For hands-on practice. Essential if going for CEH Master track.

5 Key Tools to Know

Reconnaissance

# Nmap scanning
nmap -sV -sC -O target.com
nmap -sS -p- --min-rate 5000 target

# Nikto web scanner
nikto -h http://target.com

# theHarvester
theHarvester -d domain.com -b all

Web Attacks

# SQL Injection
sqlmap -u "url?id=1" --dbs

# Directory busting
gobuster dir -u http://target -w wordlist

# XSS testing
<script>alert(1)</script>

Wireless

# Aircrack-ng suite
airmon-ng start wlan0
airodump-ng wlan0mon
aireplay-ng -0 5 -a BSSID wlan0mon
aircrack-ng capture.cap -w wordlist

Cryptography

# Hash cracking
hashcat -m 0 hash.txt wordlist.txt
john --wordlist=rockyou.txt hash.txt

# OpenSSL
openssl enc -aes-256-cbc -in file

6 CEH vs Alternatives

Certification	Cost	Focus	Recognition
CEH	$1,199+	Theory-heavy	HR/DoD loves it
OSCP	$1,749	100% practical	Industry gold standard
PNPT	$399	Practical + Report	Growing fast
eJPT	$249	Entry practical	Great starter

Bottom line: Get CEH if your employer requires it or you need 8570 compliance. For actual pentesting skills, OSCP or PNPT are better investments.

7 Frequently Asked Questions

Is CEH worth it in 2026?

Depends on your goals. For DoD/government jobs, yes-it's often required. For technical pentesting roles, OSCP/PNPT are more respected. CEH is good for getting past HR filters and checking compliance boxes.

What's the difference between CEH and CEH Master?

CEH (ANSI) is 125 multiple-choice questions-mostly theory. CEH Master adds a 6-hour practical exam where you solve 20 challenges in a live environment. Master is significantly harder and more valuable.

Can I self-study for CEH?

Yes, but EC-Council makes it harder. You need to either take official training OR prove 2+ years of infosec experience. The Matt Walker book + Boson exams is the standard self-study combo.

How long to prepare for CEH?

With infosec background: 4-8 weeks of focused study. Complete beginner: 2-3 months. The exam tests breadth over depth-you need to know a little about many topics.

Is CEH harder than Security+?

Yes. CEH covers more offensive security topics and assumes some technical background. Security+ is broader and more foundational. Many people get Security+ first, then CEH.

CEH v13