EC-Council
EC-Council Certified Ethical Hacker (CEH)
Offensive methodology, reconnaissance, exploitation concepts and reporting, taught as defensive understanding rather than tool trivia.
Certification and exam
- Certification provider
- EC-Council
- Official certification name
- EC-Council Certified Ethical Hacker (CEH)
- Required exam
- 312-50 — Certified Ethical Hacker exam
- Current exam version · effective 2024-09-01 · no retirement date announced
Grouped in our Specialist plan based on where it fits in your learning path. This is independent of EC-Council's own certification naming and tier structure.
iSecPath preparation scope
- Structured attack-lifecycle learning path
- Scenario work on scoping, rules of engagement and evidence
- Finding write-up and severity justification practice
- Competency tracking against a security testing role profile
What is and is not included
- Included: iSecPath learning access for the term of your plan.
- Not included: the external EC-Council certification exam.
- Not included: exam registration and scheduling.
- Not included: the exam fee.
- Not included: meeting EC-Council's eligibility requirements.
iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.
Prerequisites and eligibility
Set by EC-Council, not by iSecPath. Confirm against the official source before you register.
Prerequisites
- EC-Council requires either official training or an eligibility application based on prior experience.
Eligibility requirements
- Candidates who do not take EC-Council official training must submit an eligibility application and pay EC-Council's application fee.
- Candidates must accept EC-Council's code of ethics and agreement.
Experience requirements
Self-study route: EC-Council requires documented information-security work experience via its eligibility process.
Exam domains
Approximate weighting used to structure our learning path. Verify against EC-Council's published blueprint.
- Reconnaissance & Scanning24%
- System & Application Attacks30%
- Network & Wireless Attacks22%
- Reporting, Ethics & Compliance24%
Sample scenario
Scope creep during an engagement
Mid-test you discover an in-scope host trusts an out-of-scope domain controller. What do you do before touching it, and how do you document the finding without exceeding authorisation?
Focus: Reporting, Ethics & Compliance
Career path mapping
iSecPath Recommended Path. Mapping types describe our learning-path logic — "Prerequisite" is used only where the provider authoritatively requires it.
Source of truth
- Operational owner
- iSecPath Curriculum Operations
- Last verified
- 2026-08-24
- Next review
- 2026-11-24
- Verification notes
- EC-Council increments the CEH version regularly. Re-verify the active version, eligibility application fee and training requirement each quarter.
Provider information is rechecked at least quarterly and whenever EC-Council announces a material change. Exam versions here are a snapshot, never a permanent source of truth.