Certification prep · updated for v13 · free with an account

Think like an attacker. Prove it on paper.

A complete study desk for EC-Council’s Certified Ethical Hacker knowledge exam, code 312-50. Seven study domains across all twenty official modules, a full four-hour timed exam at the real length, and a drill that only asks you what you got wrong.

v13 is the version where AI stops being one chapter. There is now a domain for it: automating reconnaissance, prompt injection and the rest of the LLM attack surface, and the authorisation questions that come with testing a model you do not own.

Open the Study Desk →

Free with your learner account. Opens in your browser, progress saves automatically, and there is no card to enter.

All twenty official modules

Grouped into seven study domains, from reconnaissance through cryptography and the AI layer. Nothing on the published outline is left out.

Built for Security+ level

Assumes you can read a subnet mask and know what a process is. It does not assume you have ever run a scanner.

Drill only your misses

Every item you answer wrong collects in one place, and leaves the moment you get it right. No re-reading what you already know.

Domain 7 — AI-augmented attack & defence

Two directions, and the exam tests both. AI as the tool: automating footprinting, scan triage, phishing copy and variant generation. AI as the target: prompt injection, jailbreaking, data poisoning, model evasion and extraction, anchored to the OWASP Top 10 for LLM Applications. Plus the part most material skips — who actually has to authorise a test against a model you are only renting.

Prompt injection makes far more sense once you know how a model reads a prompt. If that is new to you, our LLM Foundations course covers it in twenty minutes, free, on the same account.

Read LLM Foundations, Module 01 →

Before you plan around this exam

Unlike most certifications, you cannot simply book CEH. EC-Council requires either completion of their official training, or an experience-based eligibility application with a fee. This study desk prepares you for the exam content — it is not EC-Council training and does not satisfy the training route.

The pass mark is not fixed either. EC-Council publishes a range of 60% to 85%, because different exam forms are equated for difficulty. Check current requirements, fees and policies with EC-Council directly before committing to a date.

See the Cybersecurity career path

Everything in this course is taught for authorised security testing only. Testing systems you do not own, without written permission, is a criminal offence under the Computer Fraud and Abuse Act and under Maryland Criminal Law § 7-302.

An independent study aid produced by Metacareerguide. CEH and Certified Ethical Hacker are trademarks of EC-Council. Not affiliated with, endorsed by, or accredited by EC-Council.