48. CEH v13 Exam Modules Map and Practice Questions

48.3 Modules 06–10 Map (System Hacking through DoS)

By Ravindra Bagale · Last updated: 27 September 2026

Modules 06–10 = access, malware awareness, sniff, people, availability. Ghabru naka – defensive framing.

Module 06 – System Hacking
Book: ch22 (Password Attacks), ch23 (Exploitation with Metasploit – OWN lab), ch26 (Privilege Escalation).
Focus: credential weakness, post-access awareness, privilege paths on OWN Metasploitable – paired with hardening.
Blue: MFA, password policy, patch, remove risky SUID/sudo misconfig, EDR/log review.

Module 07 – Malware Threats
Book: ch39 (Malware Threats), ch28 (Digital Forensics awareness).
Focus: families at concept level (virus/worm/trojan/ransomware ideas); delivery themes; no payload building.
Blue: backups offline-ish, least privilege, mail/web filtering, IR playbook, do not run mystery samples on prod.

Module 08 – Sniffing
Book: ch24 (Traffic Sniffing and Analysis).
Focus: why cleartext on a shared segment is dangerous; Wireshark for defence and lab learning.
Blue: TLS everywhere practical; avoid FTP/telnet; network segmentation; detect promiscuous oddities in lab study.

Module 09 – Social Engineering
Book: ch27 (Social Engineering Awareness).
Focus: phishing / pretext themes; consented simulation only; 1930 / cybercrime.gov.in awareness for India.
Blue: MFA, report button culture, DMARC chain, verify payment-change calls.

Module 10 – Denial-of-Service
Book: ch40 (DoS and DDoS – Availability Attacks).
Focus: availability pillar; volumetric vs application-layer ideas; never run flood tools at third parties.
Blue: rate limits, autoscaling/capacity, upstream DDoS service pattern, playbooks.