The ethical hacking syllabus is the map of what a penetration tester must know before touching a live system. It starts with networking and Linux, moves through the phases of an attack and ends with a written report that helps a company fix what you found. Skip the basics and the tools make little sense.
This guide breaks down the ethical hacking syllabus for 2026 subject by subject. It covers the tools, the legal limits in India, the certifications that match each stage and a 12-week learning roadmap with hands-on tasks.
What Does the Ethical Hacking Syllabus Cover?
Ethical hacking is the authorised practice of testing a system for security weaknesses before attackers find them. The ethical hacking syllabus teaches the phases of an attack, from reconnaissance to reporting, along with the tools and legal limits that make the work safe.
| Unit | Core Topics |
| 1. Foundations | TCP/IP, DNS and HTTP, Linux and Windows internals, virtual machines and a home lab |
| 2. Footprinting and reconnaissance | OSINT, WHOIS, DNS enumeration, search engine dorking |
| 3. Scanning and enumeration | Nmap, port and service discovery, banner grabbing, SMB and SNMP enumeration |
| 4. Vulnerability analysis | Nessus or OpenVAS scans, CVSS scores, false positives |
| 5. System hacking | Password attacks, privilege escalation, malware basics, persistence and how defenders detect it |
| 6. Web application attacks | OWASP Top 10, SQL injection, XSS, CSRF, Burp Suite |
| 7. Network, wireless and mobile attacks | Sniffing, ARP spoofing, session hijacking, denial of service, Wi-Fi and mobile or IoT weaknesses |
| 8. Cryptography and social engineering | Hashing, encryption, PKI, phishing and pretexting |
| 9. Cloud security and reporting | Cloud misconfigurations, IAM, writing findings with severity and fixes |
Training providers describe EC-Council’s CEH v13 courseware as 20 modules and over 550 attack techniques. Most university and bootcamp syllabi group those modules into units like the nine above.
Transform Your Career
Choose from our industry-leading programs designed for career success
Modern Software and AI Engineering Program
Master full-stack development with AI integration
+1000 more
AI Forward Deployed Engineer with Specialisation in AI applications
Build and deploy AI solutions for real-world business problems
+1000 more
Modern Data Science and ML with specialisation in AI
Advanced data science techniques with AI specialization
+1000 more
Advanced AIML with Specialisation in Agentic AI
Deep dive into AIML with focus on Agentic systems
+1000 more
DevOps, Cloud & AI Platform Engineering
Build and manage AI-powered cloud infrastructure
+1000 more
AI Engineering Advanced Certification by IIT-Roorkee
Premier AI engineering certification from IIT-Roorkee
Ethical Hacking Syllabus vs Cyber Security Syllabus
Students often mix the two. Ethical hacking is the offensive slice. The wider cyber security syllabus adds defence, detection and governance.
| Area | Ethical Hacking Syllabus | Cyber Security Syllabus |
| Goal | Find weaknesses by attacking with permission | Protect, detect and respond to threats |
| Core subjects | Recon, scanning, exploitation, web and network attacks, reporting | Networking, risk, cryptography, SOC, incident response, cloud security, GRC |
| Typical roles | Penetration tester, red team member, application security tester | SOC analyst, security engineer, GRC analyst, forensic analyst |
| Common tools | Nmap, Burp Suite, Metasploit, Kali Linux | Splunk, Microsoft Sentinel, ELK Stack, firewalls, EDR |
| Common credentials | CEH, OSCP | Security+, CISSP |
For the full defence-side view, read Scaler’s cyber security syllabus and cyber security course syllabus guides. Use this page for the offensive subjects in depth.
Tools in the Ethical Hacking Syllabus
Learn each tool after the concept it supports. Wireshark shows how traffic behaves. Nmap maps what a target exposes. Burp Suite lets you read and change web requests. Metasploit shows how a known weakness is exploited, and OpenVAS or Nessus find those weaknesses at scale. Most of this runs on Kali Linux inside a virtual machine.
Practise on targets built to be attacked, such as DVWA and Metasploitable, or on your own lab. Never point a scanner at a system you do not own or have written permission to test.
Want to Add Cloud and Infrastructure Skills to Your Security Base?
Scaler’s DevOps, Cloud and AI Platform Engineering program builds on Linux, AWS, Docker, Kubernetes and Terraform, with 1:1 mentorship.
Legal and Ethical Limits in India
Every unit of the ethical hacking syllabus assumes written permission and a defined scope. In India, unauthorised access falls under the Information Technology Act, 2000. A Conventus Law summary of the Act says Section 43 allows compensation of up to ₹1 crore, and Section 66 carries up to three years in prison, a fine of up to ₹5 lakh, or both.
Treat scope as a hard line. Get the rules in writing, test only the systems listed and report what you find through the agreed channel. Bug bounty programs publish their own scope, so read it before you test anything.
Certifications That Match the Ethical Hacking Syllabus
Certifications give a structure to follow and proof to show. These three map to different stages.
| Certification | Level | Exam Format |
| CompTIA Security+ (SY0-701) | Beginner | Up to 90 questions in 90 minutes; pass mark 750 on a 100 to 900 scale; launched 7 November 2023 |
| EC-Council CEH v13 | Beginner to intermediate | Knowledge exam: 125 multiple choice questions in four hours. CEH Practical: six hours, 20 challenges |
| OffSec OSCP+ | Intermediate to advanced | Hands-on exam of about 24 hours, then 24 hours to submit a report; 70 out of 100 points to pass |
Exam formats and prices change, so confirm them with each vendor before you book.
Ethical Hacking Roadmap: A 12-Week Learning Plan
Use this plan alongside your coursework. You need a laptop that can run two virtual machines, Kali Linux and a deliberately vulnerable target.
| Weeks | Focus | Hands-On Task |
| 1-2 | Networking, Linux, Bash | Capture a page load in Wireshark and set up a Kali Linux VM |
| 3 | Reconnaissance and OSINT | Map the public footprint of a domain you own |
| 4-5 | Scanning and enumeration | Scan a Metasploitable VM with Nmap and document every open service |
| 6-7 | Vulnerability analysis and system hacking | Run an OpenVAS scan, then escalate privileges on a lab machine |
| 8-9 | Web application attacks | Exploit SQL injection and XSS on DVWA using Burp Suite |
| 10 | Network, wireless and cryptography | Run an ARP spoofing test in your lab and crack a sample hash |
| 11 | Cloud security and reporting | Write a mock penetration test report with severity ratings and fixes |
| 12 | Practice | Solve beginner challenges on a CTF platform and review your gaps |
The syllabus tells you what to study. Scaler’s ethical hacking roadmap covers the career path around it, including bug bounties and first-job steps.
People often ask how to become ethical hacker without a degree. You can start without one, and Scaler’s cyber security course syllabus page notes that India requires no government licence for the field. Employers still want proof, so keep lab write-ups, CTF results and a certification on your profile.
Why the Ethical Hacking Syllabus Matters for Careers
Demand for security skills is high. A Careernet report cited by CXOtoday on 8 June 2026 counts more than 39,000 unfilled cybersecurity positions in India. DSCI and SANS findings in the same article say 63% of enterprises report that applicants lack hands-on practical skills. That is why labs and write-ups count as much as theory in this syllabus.
The skills lead to penetration testing, application security and security engineering roles. They also help developers who want to write safer code.
Free Courses by top Scaler instructors
Conclusion
The ethical hacking syllabus in 2026 follows the attacker’s path: foundations, reconnaissance, scanning, exploitation and reporting. Learn the networking base first, practise every unit in a lab and respect scope every time. Match your certification to your stage, with Security+ first and OSCP later. Start the 12-week plan this week and keep a written record of every lab.
Ready to Build Strong Software and Systems Foundations?
Scaler’s Modern Software and AI Engineering program covers DSA, backend development and system design, with live classes and 1:1 mentorship.
Explore These Course Syllabus
FAQs: Ethical Hacking Syllabus
Q1. What is included in the ethical hacking syllabus?
The ethical hacking syllabus covers networking, reconnaissance, scanning, system hacking, web attacks, wireless, cryptography and reporting.
Q2. How is the ethical hacking syllabus different from the cyber security syllabus?
The ethical hacking syllabus focuses on attacking systems with permission, while the cyber security syllabus adds defence, SOC work and governance.
Q3. What does a cyber security course syllabus include?
A cyber security course syllabus covers networking, security fundamentals, web and cloud security, SOC operations and incident response.
Q4. What does an ethical hacking roadmap for beginners look like?
A beginner ethical hacking roadmap runs from networking and Linux to scanning, web attacks, lab practice and a first certification.
Q5. How to become ethical hacker as a beginner?
Learn networking and Linux, work through the ethical hacking syllabus in a home lab, then earn Security+ or CEH.
Q6. Is ethical hacking legal in India?
Yes, with written permission, a rule the ethical hacking syllabus repeats in every unit. Unauthorised access can attract penalties under the IT Act, 2000
