CEH in 12 Weeks: Study Plan for Security Professionals

Why a Structured CEH Study Plan Matters

The Certified Ethical Hacker (CEH) exam from EC-Council is one of the most recognized certifications in cybersecurity. It validates your skills in finding vulnerabilities and weaknesses in target systems using the same knowledge and tools as a malicious hacker, but legally and ethically. However, the exam is notoriously challenging, covering 20 modules and hundreds of tools and techniques. Without a structured plan, you risk wasting time on low-yield topics and missing critical areas.

This 12-week study plan is tailored for security professionals who already have some IT background—maybe you've worked in network admin, SOC analysis, or penetration testing—but you're not yet an expert in every EC-Council tool or methodology. The plan assumes you can dedicate about 10-15 hours per week. If you have more time, you can accelerate; if less, stretch the plan to 16 weeks. We recommend pairing this with AZ-500 Study Plan: 10 Weeks for Azure Security Engineers.

Before You Start: Gather Your Resources

To follow this plan effectively, you'll need the following resources:

• Official CEH Courseware (v12) – The EC-Council official student guide (available via training or self-study). This is your primary textbook.
• CEH Certified Ethical Hacker All-in-One Exam Guide (Matt Walker) – A highly recommended supplementary book that explains concepts in plain English.
• CEH v12 Practice Tests (by Matt Walker) – Essential for checkpoint assessments.
• Virtual Lab Environment – Use VirtualBox or VMware to set up a lab with Kali Linux, Metasploitable, and Windows VMs. Practice tools hands-on.
• Online Resources – EC-Council's official iLabs (if you have access) and free resources like TryHackMe or Hack The Box for extra practice.

The 12-Week CEH Study Plan

Weeks 1-2: Foundations and Core Concepts

Topics: Introduction to Ethical Hacking, Footprinting and Reconnaissance, Network Scanning (Modules 1-3).

Hours per week: 10-12.

What to do: Read the corresponding chapters in the official courseware and Matt Walker's book. Watch video tutorials (e.g., from Cybrary or Udemy) to reinforce key concepts. In your lab, practice using tools like Nmap, Maltego, and Google Hacking Database.

Checkpoint: After Week 2, take a practice test covering these modules. You should score at least 70%. If you score below, review the weak areas before moving on.

Use the free study plans and readiness checks to spot topics that need another look before you continue.

Weeks 3-4: Enumeration and Vulnerability Analysis

Topics: Enumeration (Module 4), Vulnerability Analysis (Module 5), and System Hacking (Module 6).

Hours per week: 12-15.

What to do: Dive deep into enumeration techniques: NetBIOS, SNMP, LDAP, NFS, and DNS. Practice using tools like Nmap scripts, Enum4linux, and Nessus. For system hacking, understand password cracking (John the Ripper, Hashcat), privilege escalation, and maintaining access.

Checkpoint: Take a practice test on these modules. Aim for 75% or higher.

Weeks 5-6: Malware Threats and Sniffing

Topics: Malware Threats (Module 7), Sniffing (Module 8). Want to go further? CompTIA Security+ Study Plan: From Zero to SY0-701 in 10 Weeks is a good next step.

Hours per week: 10-12.

What to do: Study different types of malware (viruses, worms, Trojans, ransomware) and analysis techniques. For sniffing, learn about ARP poisoning, MAC flooding, and tools like Wireshark and BetterCap. Set up a simple lab to capture and analyze traffic.

Checkpoint: Practice test on these modules. Target score: 75%.

Weeks 7-8: Social Engineering and Web Application Attacks

Topics: Social Engineering (Module 9), Web Application Attacks (Module 11), and SQL Injection (part of Module 11).

Hours per week: 12-15.

What to do: Social engineering is concept-heavy; focus on attack vectors and prevention. For web apps, get hands-on with Burp Suite, OWASP ZAP, and SQLmap. Practice on deliberately vulnerable apps like DVWA or WebGoat.

Checkpoint: Take a combined practice test. Score at least 78%.

Weeks 9-10: Wireless, Mobile, and IoT Security

Topics: Wireless Network Attacks (Module 12), Mobile Security (Module 13), IoT and OT Security (Module 14).

Hours per week: 10-12.

What to do: Understand WEP/WPA/WPA2 cracking, rogue access points, and mobile platform vulnerabilities. For IoT, learn common protocols and attack surfaces. Use tools like Aircrack-ng in your lab. For background on this area, read CompTIA Security+ Passing Score: The 750 Number Explained.

Checkpoint: Practice test on these modules. Aim for 75%.

Weeks 11: Cryptography and Cloud Security

Topics: Cryptography (Module 15), Cloud Computing (Module 16).

Hours per week: 10.

What to do: Cryptography is math-heavy; focus on algorithms (AES, RSA, SHA), PKI, and attacks. For cloud, study shared responsibility model, cloud-specific threats, and tools like ScoutSuite. Use practice questions to reinforce.

Checkpoint: Take a practice test on these modules. Score 80%.

Week 12: Final Review and Practice Exams

Topics: All modules, plus emerging technologies (Module 20) and any weak areas.

Hours: 15-20.

What to do: Review your notes and flashcards. Take two full-length practice exams (e.g., from Boson or the official EC-Council practice tests) under timed conditions. Aim for 85% or higher. Analyze your mistakes and revisit those topics.

The Final 3 Days Before the Exam

In the last three days, don't try to learn new material. Instead, focus on:

• Day 1: Review all your notes and flashcards. Skim the official courseware's summary sections.
• Day 2: Take one more full practice test to build stamina. Review the explanations for every question, even the ones you got right.
• Day 3: Relax. Do light review of key concepts like tools and ports. Ensure you know your exam logistics (time, location, ID). Get a good night's sleep.

Final Tips for Success

• Hands-on practice is crucial. The CEH exam includes scenario-based questions that require practical knowledge.
• Use the official courseware as your primary source; the exam is based on it.
• Join study groups or forums like r/CEH to stay motivated and get tips.
• Take care of your health; burnout is real.

Unsure where to begin? The certification catalogue lets you filter by vendor, domain, and level.