CPENT, Penetration Testing Professional
The natural progression for anyone moving into full-time offensive work. Substantially harder and far more lab-intensive.
View courseCEH Training in Bangalore, Certified Ethical Hacker Course
Certified Ethical Hacker is the certification hiring managers recognise fastest, and our CEH training in Bangalore is built to make it mean something on your CV. The 40-hour programme follows EC-Council's curriculum, but the emphasis is on doing the work rather than memorising the objectives.
- Duration
- 40 hours
- Level
- Intermediate
- Prerequisite
- Networking fundamentals
- Certification
- EC-Council CEH
Overview
What this course is for
If you have been searching for an ethical hacking course in Bangalore, this is the one that leads to a recognised certification rather than a course completion certificate. It runs at our Marathahalli centre and live online, with weekend batches for working professionals.
You learn the attacker's methodology in sequence, reconnaissance, scanning, enumeration, exploitation, post-exploitation, reporting, and you practise each phase against lab targets. The reporting phase gets real attention, because the ability to write up a finding clearly is what separates a certified candidate from a useful one.
Who should take it
- IT and network professionals moving into offensive security roles
- Security analysts who need CEH as a role or employer requirement
- Graduates who have completed a foundational cyber security course and want a recognised certification
- Developers and system administrators who want to understand how their systems get broken
What you will be able to do
- Execute a structured ethical hacking engagement from scope to report
- Use Nmap, Metasploit, Burp Suite and Wireshark competently against live targets
- Prioritise findings by exploitability and business impact, not scanner severity
- Sit the EC-Council CEH exam with practical lab experience behind you
Roles this leads to
CEH holders in Bangalore commonly move into Penetration Tester, VAPT Analyst, Security Consultant and Application Security Analyst roles.
Curriculum
Syllabus, 40 hours
Every module pairs instruction with lab work. You practise the technique in the same session you learn it.
| 01. Attacker methodology and the ethical hacking framework The structured phases of an engagement, and the rules of engagement that keep it legal. |
| 02. Footprinting and reconnaissance OSINT, DNS enumeration and passive information gathering against a defined scope. |
| 03. Scanning networks and enumeration Host discovery, port and service identification, and mapping the live attack surface. |
| 04. Vulnerability analysis Turning scanner output into a prioritised, evidence-backed picture of real risk. |
| 05. System hacking and exploitation basics Gaining access, escalating privilege, and maintaining a foothold in lab conditions. |
| 06. Web application attacks Injection, broken authentication and the OWASP issues that still dominate findings. |
| 07. Network and wireless attack techniques Sniffing, spoofing, session attacks and wireless weaknesses. |
| 08. Social engineering The human attack surface and why it remains the most reliable initial access route. |
| 09. Evading detection How defensive controls are bypassed, and what that teaches you about building better ones. |
| 10. Reporting and remediation guidance Documenting findings so that engineering teams can actually act on them. |
Schedule
How the 40 hours are structured
Batch dates vary; the sequence does not. Weekday, weekend and evening formats cover the same blocks.
| Block | Hours | Focus |
|---|---|---|
| Sessions 1-2 | 8 hrs | Methodology, legality and reconnaissance The phases of an engagement, rules of engagement and scope agreements, then passive and active information gathering. |
| Sessions 3-4 | 8 hrs | Scanning, enumeration and vulnerability analysis Host discovery, service fingerprinting, and turning raw scanner output into a prioritised picture of real risk. |
| Sessions 5-6 | 8 hrs | System hacking and privilege escalation Gaining access, escalating privilege and maintaining a foothold across Windows and Linux targets. |
| Sessions 7-8 | 8 hrs | Web, wireless and network attacks OWASP-class web weaknesses, sniffing and spoofing, session attacks and wireless exposure. |
| Sessions 9-10 | 8 hrs | Social engineering, evasion and reporting The human attack surface, bypassing defensive controls, and writing findings engineering teams can act on. |
Practice
Labs you will complete
- Perform OSINT and DNS reconnaissance against a scoped target with no prior information
- Fingerprint a network and identify every exposed service and version
- Validate scanner findings manually and discard the false positives
- Exploit a vulnerable service and escalate to administrative privilege
- Test a web application for injection and broken authentication flaws
- Capture and analyse credentials traversing an unencrypted protocol
- Crack password hashes and demonstrate the impact of weak policy
- Build a social engineering pretext and assess its plausibility
- Produce a full engagement report with prioritised, evidence-backed remediation
Toolchain
Tools you will use
| Tool | Used for |
|---|---|
| Nmap | Network discovery and service enumeration |
| Metasploit Framework | Exploitation and post-exploitation |
| Burp Suite | Web application interception and testing |
| Wireshark | Traffic capture and credential analysis |
| Nikto / directory tooling | Web server and content discovery |
| John the Ripper / Hashcat | Password hash analysis |
| Aircrack-ng | Wireless security assessment |
| OSINT tooling | Passive reconnaissance and exposure mapping |
Certification
The certification exam
| Exam code | 312-50 (ECC Exam Portal / Pearson VUE) |
| Current version | CEH v13 |
| Questions | 125 multiple choice |
| Duration | 4 hours |
| Passing score | Varies by exam form, commonly around 70% |
| Certification validity | 3 years, renewable via 120 ECE credits |
CEH Master is a separate, optional credential earned by additionally passing CEH Practical, 20 hands-on challenges over 6 hours in EC-Council's iLabs cyber range. Exam vouchers are purchased from EC-Council separately from training fees. Exam formats and pricing change periodically, so confirm current details with us at enrolment.
Progression
Where this leads next
CHFI, Computer Forensics
For practitioners who want to work the other side of the incident: establishing what happened and proving it.
View course
Questions
Frequently asked questions
What are the prerequisites for CEH training in Bangalore?
You need working knowledge of networking and operating systems, TCP/IP, common ports and services, and basic Windows and Linux administration. If you do not have that yet, start with our Foundations course or the Basics Mastery programme, which build it in.
Does the course fee include the EC-Council exam voucher?
Exam vouchers are priced separately from training by EC-Council. Contact us for the current voucher cost and whether a bundled option is available for your batch.
Is CEH worth it for someone changing careers into cyber security?
It depends on the target role. CEH opens doors in offensive and consulting roles and is widely recognised by Indian recruiters. But if you are switching careers and want the fastest route to employment, defensive roles are hiring more volume in Bangalore, the CSA (Certified SOC Analyst) track is often the more practical first certification.
Is this the same as an ethical hacking course?
Yes. Ethical hacking is the discipline; CEH is EC-Council's certification in it. Most ethical hacking courses in Bangalore teach the same methodology, but not all of them prepare you for a certification that recruiters actually recognise. This one does, and the exam is the industry standard rather than an in-house certificate.
Do you offer weekend CEH batches for working professionals?
Yes. We run weekend batches at our Marathahalli centre and online, so the 40 hours can be completed without taking leave from work.
Is ethical hacking legal in India?
Testing systems you own or have written authorisation to test is legal. Testing without authorisation is an offence under the Information Technology Act, 2000. The course covers scope agreements and rules of engagement precisely because this boundary matters professionally.
Other tracks
Compare with our other courses
Foundations of Cybersecurity
Core cyber security fundamentals spanning endpoints, networks, web security, IAM, SOC and governance.
View courseCybersecurity Basics Mastery
Beginner-to-job-ready programme with live labs, SOC operations, ethical hacking and compliance coverage.
View courseCSA - Certified SOC Analyst
SOC-focused training on SIEM fundamentals, alert triage, incident workflows and security operations.
View courseCPENT - Penetration Testing
Advanced offensive security: simulate real attacks to identify and prove exploitable weaknesses.
View courseCHFI - Computer Forensics
Digital forensics covering evidence handling, DFIR workflows, incident investigation and compliance reporting.
View course
Next cohort · Bengaluru & online
Ready to start CEH - Certified Ethical Hacker?
Speak to a counsellor about batch dates, fees and whether this course fits your current background. No obligation, no sales pressure.