June 8, 2025
Pursuing the CEH: What I've Learned So Far
Lessons from studying for the Certified Ethical Hacker exam and what makes it different from Security+.
After earning my CompTIA Security+, the natural next step was the Certified Ethical Hacker (CEH) from EC-Council. If Security+ gave me the vocabulary of defense, CEH is teaching me to think like an attacker — and that shift in perspective changes everything.
How CEH Differs from Security+
Security+ is broad — it covers governance, risk management, cryptography, network security, and more. CEH goes deep on offensive security: reconnaissance, scanning, enumeration, system hacking, web app attacks, social engineering, and evasion techniques.
The mindset shift is significant. Instead of asking “how do we protect this?”, you start asking “how would I break this?” Understanding the attacker’s methodology makes you a significantly better defender.
Key Topics
- Footprinting and reconnaissance — OSINT, DNS enumeration, social media profiling
- Scanning and enumeration — Nmap, Nessus, identifying live hosts and services
- System hacking — Password cracking, privilege escalation, maintaining access
- Web application attacks — SQL injection, XSS, CSRF, session hijacking
- Social engineering — Phishing, pretexting, tailgating techniques
My Study Approach
I’m combining the official EC-Council courseware with practical labs on platforms like TryHackMe and HackTheBox. The key is to practice every technique in a lab environment. Understanding SQL injection conceptually is one thing — actually exploiting it against a vulnerable app cements the knowledge.
Is It Worth It?
If you’re pursuing a career in penetration testing or ethical hacking, absolutely. Even if you end up in a defensive role, understanding offensive techniques makes you better at your job. You can’t build effective defenses if you don’t understand how they’re attacked.