48. CEH v13 Exam Modules Map and Practice Questions
48.2 Modules 01–05 Map (Intro through Vulnerability Analysis)
Modules 01–05 = foundation. Ethics, footprint, scan, enum, vuln analysis. Aata pudhe jaauya.
Module 01 – Introduction to Ethical Hacking
Book: ch17 (Why Learn All This Before Kali), ch18 (Ethics, the Law and a Safe Kali Lab), ch34 (Indian Cyber Law), ch35 (Careers, Certifications and Bug Bounty).
Focus: types of hackers (awareness), CIA triad, five phases at high level, legal permission, lab design.
Blue: policy, written scope, Acceptable Use, IT Act awareness.
Module 02 – Footprinting and Reconnaissance
Book: ch19 (Information Gathering and Scanning), ch36 (Amass, WhatWeb and friends).
Focus: passive OSINT vs active probes; whois/DNS/subdomain ideas; technology fingerprint purpose.
Blue: shrink public footprint; monitor certificate / DNS noise; no secrets in public repos.
Module 03 – Scanning Networks
Book: ch01–ch03 (IP, ports, TCP/UDP), ch19 (Nmap family).
Focus: host discovery and port/service awareness on OWN ranges; TCP vs UDP sense.
Blue: SG/firewall least privilege; detect noisy scans; close unused ports on public EIP.
Module 04 – Enumeration
Book: ch37 (NetBIOS/SMB/SNMP/LDAP/SMTP/NFS/DNS enum), ch38 (AD awareness).
Focus: what "extra detail after scan" means – shares, users, banners – without exploit steps.
Blue: disable unused services; null-session style risks closed; log auth to directory services.
Module 05 – Vulnerability Analysis
Book: ch20 (Vulnerability Scanning and Assessment).
Focus: scanner reports as prioritisation input, not automatic exploit. CVE idea + risk ranking.
Blue: patch SLAs; internet-facing first; false-positive hygiene; change tickets.
| Red team (attacker) does | Blue team (defender) detects / stops |
|---|---|
| OSINT + noisy Nmap on out-of-scope cafe Wi-Fi | Written IP list; host-only adapter; refuse out-of-scope |
| Runs vuln scanner then "auto-exploit" mindset | Triage CVE by exposure; patch; re-scan OWN asset only |
Ravindra Bagale's Tip
Module 03–04 confuse: scan = "kay open?", enum = "tya open service varun extra detail". Students donhi ekach nmap flag madhe mix kartat. Exam MCQ madhe phase order bagha. Samjla ka?
Lab
On Kali 192.168.56.10 against only Metasploitable 192.168.56.20: gentle nmap -sS -T2 -p 22,80,139,445 192.168.56.20. Note open ports. Write one line per port: "Blue would …". No exploit. Snapshot notes for Module 03–04.