Ethical Hacker Community Forums

Ethical Hacking Discussions and Related Certifications => CEH - Official Course Modules v5 => Topic started by: don on November 10, 2006, 12:40:37 PM



Title: Differences Between CEH v4 and v5
Post by: don on November 10, 2006, 12:40:37 PM
As we continue to explore v5 of the CEH courseware, we will bring you news as to what to expect as well as comparisons with v4.

Much more to come, but I did want to point out a glaring difference that I noticed right away. v5 has 25 more questions on the exam to bring the total to 150. They also added an hour of testing time to give you 4 hours to finish the exam.

Don


Title: Re: Differences Between CEH v4 and v5
Post by: blackazarro on November 12, 2006, 09:51:57 PM
The following is a post from boss in http://www.professionalsecuritytesters.org/ (http://www.professionalsecuritytesters.org/) with regards to what's new in CEH v5. It's interesting what cdupuis had to say about the new version.

Quote
cdupuis writes "NOTE FROM CLEMENT:
The new CEH V5 has been released. They added a few more modules and once again they seem to be very focused on tools. The announcement below mentions skills only once but does mention tools at least 8 times. This is scary.

Myself I do not care much about playing with "tons" of tools as they stated below. I care if the student knows what the tools does, how it does it, when to use it, what is the best usage for the tool, and what the tool will allow you to do/gather that you could not do with any other tool. Most tester toolbox will not include hundreds of tools, you will have a small collection of quality tool and your brain is still the best tool of all.

I saw that Virus Writing was added as well as reverse engineering. Those are not two common skills that you will use in all of your pentests. When was the last time you did a pentest and you had to write viruses for your client.

They mentioned the huge collection of tools from the UNDERGROUND. What type of vetting was done of this huge collection of tools being distributed to the students??? Am I going to recommend to my students they use underground tools where they could put their clients at risk? I think NOT.

I will contact the EC-Council and see if I can get an evaluation copy. Once I have done due diligence on the content I will report back. I am making a quick jugment above and I would like to either confirm it or confirm that I am wrong (which I hope is the case).

See announcement below:

From: Editor [mailto:editor@eccouncil.org]
Sent: Thu 11/9/2006 5:18 AM
To: Clement Dupuis

November 09th, 2006

Hi Clement,

Certified Ethical Hacker version 5 launched!

EC-Council is proud to announce the launch of the latest version of the Certified Ethical Hacker certification. The Certified Ethical Hacker v5 was successfully launched in the second week of October, 2006 inNorth America and will be followed suit by other regions around the world at differing dates. Accredited Training Centers are advised to contact their local distributor for specific launch dates in their region.

This latest version of Certified Ethical Hacker contains more modules and tons of new tools directly from the hacker underground! This will help organizations in their countermeasures plan. An additional 4 modules have been added to Version 5 to widen students' scope of knowledge. Totaling 26 modules, the new modules are:

* Writing Windows Exploits,
* Reverse Engineering,
* Covert Hacking, and
* Advanced Virus Writing Skills.

The additional modules will give students a wider knowledge base on hacking technologies and be able to effectively safeguard systems by being on par, if not ahead, of malicious hackers.

There are also 8 CD-ROMs consisting of thousands of tools such as Trojans, viruses, backdoors, rootkits and exploit codes.

Version 5 contains tons of new hacking tools, techniques and methodologies.
Each module in Version 5 is showcased with tons of tools. This is to ensure that students are exposed to all the tools covered in each module and attain a higher grasp of the concept behind each tool. By understanding the hacking technologies, students will be able to apply their knowledge to all future and outdated tools in their work to overcome and avoid potential malicious hacks.

Certified Ethical Hacker v5's content is wide and much more advanced than previous versions, giving students a greater insight into the mind of malicious hackers.

To increase flexibility, the Certified Ethical Hacker course may be conducted via one of the three (3) recommended modes of study. These modes are:

* The regular 9.00am - 5.00pm, 5-day training with self-study;
* A 9.00am - 6.00pm, 5 -day training with self-study; and
* A 9.00am - 9.00pm 5-day bootcamp.

Accredited Training Centers should offer the mode which best suits its students' needs and which the Accredited Training Center is equipped to offer.

An Instructor Guide is now available with Version 5 to aid instructors better in their efforts to impart knowledge to students. Acting as a step-by-step manual, the Instructor Guide covers each training module and leads the instructor from Day 1 to Day 5 of training. The guide also points out the do's and dont's to the instructor and provides practical recommendations for the training.

"We understand that technology is ever-changing and dynamic. That's why we strive to update our courseware in a timely manner, and for Certified Ethical Hacker, we ensure that there is a new version every six months." commented Haja Mohideen, Technical Director of EC-Council.
"


Title: Re: Differences Between CEH v4 and v5
Post by: blackazarro on November 15, 2006, 04:22:00 PM
Today I placed an order from element K for the CEH v5 courseware and I just got clobbered  :'( . An additional difference between CEH v4 and v5 is the cost. The v5 self-study guide cost $500 without shipping and handling, whereas v4 cost $400. That's a whole lot of dough, but it's way cheaper than attending a 5-day boot-camp which cost thousands of dollars. I hope that ec-council had put in effort to make this version better than previous releases. Let the studying begin!!


Title: Re: Differences Between CEH v4 and v5
Post by: don on November 15, 2006, 04:32:45 PM
More items I noticed while going through the modules:

1. Coverage of Exploit Frameworks: Metasploit, Core Impact, CANVAS
2. More extensive coverage of wireless
3. More extensive coverage of the penetration testing process
4. Labs include writing exploit code, reverse engineering and an intro to assembly language, etc.

Don


Title: Re: Differences Between CEH v4 and v5
Post by: Kev on November 17, 2006, 09:39:29 AM
We need a review of the new course material they are shipping for $500 as soon as possible. I hope it is better than what they have had in the past.


Title: Re: Differences Between CEH v4 and v5
Post by: don on November 17, 2006, 12:09:00 PM
I just received review copies of the Offical Courseware for CEH v5. I will be going through them soon, but I did want to add that there are now 4 books instead of 3. The package come with:

  • Volumes 1, 2 and 3 of the Courseware Manuals and Courseware CDs
  • 1 Lab Manual and a Lab CD
  • BackTrack Bootable Linux CD
  • Backpack and a T-Shirt

There are more CDs in v5 than in v4. Also v4 came with Auditor, so it stands to reason that v5 would come with BackTrack (http://www.remote-exploit.org/index.php/BackTrack) (combination of WHax and Auditor).

I'll continue to update all of you as I come across different items. Eventually, I will compile all thoughts into 1 article.

Stay tuned...

Don


Title: Re: Differences Between CEH v4 and v5
Post by: Dengar13 on November 21, 2006, 06:51:38 PM
I have been out of commission a bit lately, when did the new version come out?


Title: Re: Differences Between CEH v4 and v5
Post by: don on November 21, 2006, 08:01:13 PM
Great to see your friendly face back in the community.

As for your question, check out:

CEH v5 Release Date - Nov 13, 2006 (http://www.ethicalhacker.net/component/option,com_smf/Itemid,49/topic,782.0/)

Don


Title: Re: Differences Between CEH v4 and v5
Post by: Dengar13 on November 22, 2006, 09:31:48 AM
Thanks Don!  New job, kids going to school for the first time, wife and I going back to school doesn't give me much time for anything.  I am glad to see that this site got much, much bigger!   :D


Title: Re: Differences Between CEH v4 and v5
Post by: mctoffer on December 07, 2006, 04:48:06 AM
i still feel that the 5-day bootcamp is not enough to fully scrutinize all the topics listed on the CEH curriculum ....


Title: Re: Differences Between CEH v4 and v5
Post by: Kev on December 08, 2006, 12:29:24 PM
Yes thats true. A boot camp should be  seen only  as a review and maybe get a few new tips.  Unfortunatly I have seen a few less than reputable companies imply that  they can take a total hacking noob and turn them into a hard core hacker in 5 days!  Some of these companies have commissioned based sales people pushing these classes and sometimes are willing to promise a little too much. Make sure you feel comfortable with all the modules before you spend on a boot camp, that way you will make it more worth while.


Title: Re: Differences Between CEH v4 and v5
Post by: BillV on December 11, 2006, 02:37:44 PM
I think there are several things worth noting from previous posts in this thread. First, someone posted a quote from another site made by someone that doesn't quite seem to grasp the concept behind the CEH.

The idea is not to hand-feed you the tools/skills necessary to be a hacker. The idea is to give you the insight into how malicious hackers go about doing what they do. You're meant to experiment with the different tools and learn how to use them on your own. Then from there you can decide which you'd like to add to a 'toolkit.' The same goes for what was said about writing viruses or reverse engineering. I'm sure it'd be extremely rare that you'd be asked to write a virus for a security test, but again, it's something that hackers do that the ethical hackers need to be aware of and the concept/idea behind it.

As for what's included in the v5, Don pretty much named everything. I just wanted to add to that a bit. You do receive 4 books (3 courseware, 1 lab manual) and 8 CDs (4 lab, 1 additional tools, 2 video lab, 1 BackTrack v1).

And to finish up with the last post about bootcamps being a review. I completely agree :) You have to study the topic in advance before attending the bootcamp, otherwise you'll be completely lost. Does anyone really think they can go through 3 dicitionary sized books of material in a 5-day course? There are several articles here on setting up a lab to practice, and I'm sure it's highly recommended.

Venom


Title: Re: Differences Between CEH v4 and v5
Post by: oleDB on December 12, 2006, 08:51:31 AM
I'm taking the v5 bootcamp next March. What do you recommend doing studywise prior to the bootcamp? Do they send the courseware to you early so you can read it in advance or do you have wait to get it once you arrive onsite?

Thx


Title: Re: Differences Between CEH v4 and v5
Post by: don on December 12, 2006, 12:38:44 PM
Depends on the group offering the course. But like I always say, it's amazing what you can get if you just ask for it. So either way, ASK them to send all of the materials well in advance of the class. It will pay off.

Don