The Certified Ethical Hacker (CEH) from EC-Council is one of the most requested certifications in Indian cybersecurity job listings, especially for VAPT, SOC and security analyst roles. Version 13 (CEH v13, launched in 2024) keeps the classic ethical hacking syllabus and adds AI throughout. This guide covers how the exam works, who can take it, how scoring works, and a realistic 8-week plan to prepare.
What Is CEH v13?
CEH tests whether you understand how attackers think and work – the five phases of ethical hacking (reconnaissance, scanning, gaining access, maintaining access and covering tracks) – and how to use common tools to find weaknesses before criminals do. CEH v13 adds AI to that workflow: AI-assisted reconnaissance, automating repetitive tasks, and understanding attacks against AI systems themselves.
CEH v13 Exam Pattern
| Item | CEH (Knowledge exam) | CEH Practical |
|---|---|---|
| Exam code | 312-50 | Practical, lab-based |
| Format | Multiple-choice questions | Hands-on challenges in a live lab |
| Questions | 125 | 20 challenges |
| Duration | 4 hours | 6 hours |
| Delivery | Online proctored or at a test centre | Online proctored |
| Result | CEH certification | CEH (Practical) credential |
Pass both and you earn the CEH Master title. For most freshers, the knowledge exam comes first; the Practical is a strong addition once you are confident with tools like Nmap, Metasploit, Burp Suite and Wireshark.
Passing Score: Why It Is a Range
EC-Council uses several versions of the exam, and each version has its own cut score based on how difficult its questions are. That is why the passing score sits somewhere between 60% and 85% rather than one fixed number. In practice, aim for 85% or more on your practice tests so you pass comfortably whichever version you get.
Who Is Eligible for the CEH Exam?
EC-Council sets the eligibility rules for the CEH certificate. Broadly, there are two routes:
- Training route – candidates who complete EC-Council's own CEH training can sit the exam directly.
- Experience route – candidates with at least two years of work experience in information security can apply to EC-Council for exam eligibility. This involves an application and a non-refundable application fee.
The skills you need are the same on either route. Check EC-Council's website for the current eligibility rules before you apply.
What the CEH v13 Syllabus Covers
The exam spans 20 modules. Grouped by theme, they look like this:
| Area | Topics |
|---|---|
| Foundations | Ethical hacking concepts, laws, frameworks such as MITRE ATT&CK and the Cyber Kill Chain |
| Recon & scanning | Footprinting, OSINT, network scanning, enumeration, vulnerability analysis |
| System attacks | Password cracking, privilege escalation, malware, sniffing, social engineering, DoS, session hijacking |
| Evasion | Firewalls, IDS/IPS and honeypots |
| Web | Web servers, web applications, SQL injection |
| Wireless, mobile & IoT | Wi-Fi attacks, Android/iOS, IoT and OT |
| Cloud & crypto | Cloud computing threats, cryptography |
8-Week CEH v13 Study Plan
This plan assumes about 2 hours on weekdays and 4 hours on weekends. Stretch it to 12 weeks if you are new to networking.
| Week | Focus | Hands-on practice |
|---|---|---|
| 1 | Networking, Linux basics, hacking concepts and laws | Set up Kali Linux and a vulnerable VM lab |
| 2 | Footprinting, OSINT, scanning | Nmap scans, AI-assisted OSINT on your own lab targets |
| 3 | Enumeration, vulnerability analysis | Nessus/OpenVAS scans; read and prioritise results |
| 4 | System hacking, malware, sniffing | Password attacks, privilege escalation, Wireshark captures |
| 5 | Social engineering, DoS, session hijacking, evasion | Phishing analysis, IDS evasion basics in the lab |
| 6 | Web servers, web apps, SQL injection | Burp Suite on OWASP Juice Shop or DVWA; SQLmap |
| 7 | Wireless, mobile, IoT, cloud, cryptography | Aircrack-ng lab, hashing and encryption exercises |
| 8 | Full revision | Timed 125-question mock tests; revise weak modules |
Exam-Day Tips
- You get roughly 1.9 minutes per question – flag hard ones and come back later.
- Read every word: “best”, “first” and “most likely” change the right answer.
- For online proctoring, test your webcam, microphone and internet a day before, and clear your desk.
- Know common default ports (21, 22, 23, 25, 53, 80, 110, 139, 143, 443, 445, 3389) – they appear often.
Keeping Your CEH Active
CEH is valid for three years. To renew, you earn 120 continuing education credits (ECE) over that period – from training, webinars, conferences or other certifications – and pay EC-Council's annual membership fee.
Prepare with Hands-On Training
Our Ethical Hacker AI (CEH v13) course follows the CEH v13 syllabus with 16 practical modules, 24/7 online labs and four daily batch timings – offline at HITEC City, Hyderabad or live online. Not sure which certification to start with? Read our comparison of CEH vs OSCP vs PenTest+.