CEH: inside the ethical hacking certification
Certified Ethical Hacker is the certification that made offensive security a mainstream career, and it remains the name hiring managers recognise first when a job spec says 'penetration testing'.
The syllabus walks the attacker's kill chain: reconnaissance, scanning, gaining access, maintaining access, covering tracks — across networks, web applications, wireless, mobile and cloud. Version 12 added extensive hands-on ranges, answering the old criticism that CEH was theory-heavy.
Preparation should mirror that shift: candidates who spend most study time inside the lab environments, actually running the tooling against vulnerable targets, both pass and interview dramatically better.
CEH's sweet spot is the transition into security testing from adjacent roles — network admin, developer, SOC analyst. It certifies breadth first; depth comes later through practical exams and specialisation.
Legality matters and is part of the point: ethical hacking is authorised, scoped and reported. The certification teaches the professional wrapper as seriously as the exploits.