Skip to main content
Ace Skills Consulting
EC-Council logoIntermediatePopular

312-50: Certified Ethical Hacker (CEH)

Learn how attackers work so you can defend against them — with hands-on labs and structured preparation for the CEH 312-50 exam.

  • 40 hours of live, lab-driven preparation
  • Five phases of ethical hacking in practice
  • Web, wireless, mobile, IoT and cloud attack labs
  • Mapped to the published CEH exam blueprint areas
  • Practice questions with explanations
Aligned to EC-Council exam 312-50
Duration
5 Days | 40 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Intermediate
Exam
312-50
Language
English

Why learn 312-50 with Ace Skills

  • Learn the attacker’s toolkit

    Use reconnaissance, scanning and exploitation tools in a safe, isolated lab.

  • Defence for every attack

    Each technique comes with the controls that detect or prevent it.

  • Modern attack surfaces

    Cover cloud, IoT, OT and mobile alongside traditional networks and web applications.

  • Exam-aligned preparation

    Topics follow the published CEH exam areas with regular practice questions.

Course overview

Ethical hackers use the same tools and techniques as attackers, with permission, to show organisations where they are exposed. Understanding that attacker mindset is useful well beyond penetration testing: defenders, auditors and architects all make better decisions when they know how systems are actually broken into. This five-day course is exam-aligned preparation for the CEH 312-50 exam, built around hands-on practice.

Day one introduces information security and ethical hacking concepts, legal considerations and the attack methodology, followed by footprinting and reconnaissance. Day two covers scanning networks, enumeration and vulnerability analysis. Day three focuses on system hacking, malware threats, sniffing and social engineering. Day four addresses denial of service, session hijacking, evading IDS and firewalls, and web server and web application attacks, including SQL injection. Day five covers wireless networks, mobile platforms, IoT and OT, cloud computing and cryptography, finishing with exam readiness.

Every module includes practical work in an isolated lab, and the trainer explains the countermeasure for each technique so that you leave with both offensive and defensive understanding. Ethics and authorisation are emphasised throughout.

This is independent, exam-aligned training; it does not use EC-Council courseware and Ace Skills Consulting does not claim to be an EC-Council Accredited Training Centre. Exam eligibility, registration and vouchers are handled through EC-Council’s official channels, so confirm the current exam version and requirements with EC-Council before booking.

Key features

  • Isolated lab environment for safe practice
  • Countermeasures taught alongside every attack
  • Web application and SQL injection labs
  • Wireless, cloud and IoT attack coverage
  • Practice questions mapped to blueprint areas
  • Course completion certificate from Ace Skills Consulting
  • Post-training doubt support while you prepare

Who should attend

  • Security analysts and SOC staff
  • Network and system administrators
  • Aspiring penetration testers
  • IT auditors who assess technical controls
  • Security+ holders progressing to offensive skills

Prerequisites

  • Networking fundamentals including TCP/IP
  • Familiarity with Windows and Linux
  • Security+ level knowledge recommended

Curriculum

5 Days · 40 Hours · 15 Modules · 9 Labs

  1. Ethical hacking concepts

    • Information security elements and attack classes
    • Hacking methodology and frameworks
    • Laws, standards and authorisation
    • Information assurance and risk

    Footprinting and reconnaissance

    • Search engine and social media footprinting
    • WHOIS and DNS footprinting
    • Network footprinting
    • Countermeasures
    • Lab: Perform passive footprinting of a fictional organisation · 45 min

    Lab environment

    • Kali Linux and target systems
    • Documenting findings

  2. Scanning networks

    • Host discovery
    • Port and service scanning
    • OS fingerprinting
    • Scanning beyond IDS and firewalls
    • Lab: Scan the lab network with Nmap using different techniques · 50 min

    Enumeration

    • NetBIOS and SMB enumeration
    • SNMP and LDAP enumeration
    • DNS and NTP enumeration
    • Lab: Enumerate users and shares on a Windows target · 40 min

    Vulnerability analysis

    • Vulnerability classification and scoring
    • Assessment tools
    • Reading assessment reports
    • Lab: Run a vulnerability assessment and rank findings · 35 min

  3. System hacking

    • Gaining access and password cracking
    • Privilege escalation
    • Maintaining access
    • Clearing tracks
    • Lab: Crack password hashes and escalate privileges · 50 min

    Malware threats

    • Trojans, viruses and worms
    • Fileless malware
    • Malware analysis basics
    • Countermeasures

    Sniffing and social engineering

    • MAC, DHCP and ARP attacks
    • DNS poisoning
    • Social engineering techniques
    • Insider threats and identity theft
    • Lab: Capture credentials with ARP spoofing in the lab · 40 min

  4. Denial of service and session hijacking

    • DoS and DDoS techniques
    • Botnets
    • Application and network session hijacking
    • Countermeasures

    Evading defences

    • IDS, IPS and firewall evasion
    • Honeypots
    • Evasion countermeasures

    Web servers and applications

    • Web server attacks
    • OWASP Top 10 vulnerabilities
    • SQL injection techniques
    • Web API and webhook attacks
    • Lab: Exploit SQL injection and cross-site scripting in a vulnerable app · 60 min

  5. Wireless and mobile

    • Wireless encryption and attacks
    • Bluetooth threats
    • Android and iOS attack vectors
    • Mobile device management
    • Lab: Analyse a captured WPA2 handshake · 30 min

    IoT, OT and cloud

    • IoT and OT attack surfaces
    • Cloud service models and threats
    • Container and serverless security
    • Cloud hacking countermeasures

    Cryptography and exam readiness

    • Encryption algorithms and PKI
    • Cryptanalysis and attacks
    • Practice questions and review
    • Lab: Encrypt, sign and verify data with OpenSSL · 25 min
Download full syllabus (PDF)

Skills you will gain

  • Ethical hacking methodology
  • Footprinting
  • Network scanning
  • Enumeration
  • Vulnerability analysis
  • System hacking
  • Sniffing
  • Social engineering
  • Web application attacks
  • SQL injection
  • Wireless security
  • Cloud and IoT security
  • Cryptography

Tools & technologies

  • Kali Linux
  • Nmap
  • Metasploit
  • Wireshark
  • Burp Suite
  • sqlmap
  • Hydra
  • John the Ripper
  • Aircrack-ng

Certification exam

Exam details
Exam nameCertified Ethical Hacker (CEH)
Exam code312-50
Number of questions125
Duration240 minutes
Voucher includedNo — book directly with the vendor
Question formatMultiple choice

Skill areas measured

  1. Information Security and Ethical Hacking Overview
  2. Reconnaissance Techniques
  3. System Hacking Phases and Attack Techniques
  4. Network and Perimeter Hacking
  5. Web Application Hacking
  6. Wireless Network Hacking
  7. Mobile Platform, IoT, and OT Hacking
  8. Cloud Computing
  9. Cryptography

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 40 hours of live, trainer-led sessions
  • 9 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 50 min

    Scan the lab network with Nmap using different techniques

  • Day 4 · 60 min

    Exploit SQL injection and cross-site scripting in a vulnerable app

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The EC-Council certification itself is awarded by EC-Council when you pass exam 312-50.

Frequently asked questions

How do I register for the CEH exam?

You register for the exam through EC-Council’s official channels, which set the eligibility rules, including the application process for candidates who have not attended official training. We guide you through the steps but cannot issue vouchers ourselves.

Is this official EC-Council training?

No. This is independent, exam-aligned preparation using our own material; it does not use EC-Council courseware.

Which CEH version does the course follow?

The course follows the current published exam areas. EC-Council updates CEH versions periodically, so confirm the active version before booking.

Is hacking practice legal?

Yes, within our isolated lab. You must only test systems you are explicitly authorised to test.

Should I take CEH or PenTest+?

CEH covers a broad range of attack techniques, while PenTest+ focuses more on the full engagement and reporting. We can help you choose based on your goals.

Related courses

Explore more

All Cybersecurity courses EC-Council certifications

CEH, CHFI and CND are trademarks of the International Council of E-Commerce Consultants (EC-Council).

Train your team on 312-50

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.