StationX
Start free

Home › Exams › CEH

CEH hands-on labs — Certified Ethical Hacker

CEH is the exam for Certified Ethical Hacker. 81 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 108 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 59 come with StationX Membership ($299/year) and 22 need StationX Infrastructure Labs ($149/year).

81 labsabout 108 hoursStationX Membership · $299 / year · 59 labsStationX Infrastructure Labs · $149 / year · 22 labs

Access

StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

CEH at a glance

Exam code
CEH
Certification
Certified Ethical Hacker
Vendor
EC-Council
Labs
22 in StationX Infrastructure Labs · 59 in StationX Membership
How the labs are mapped
81 from the StationX roadmap
Practice time
About 108 hours, every lab states a duration
Lab levels
Guided 14 · Advanced 6 · Expert 2 · not stated 59

The 81 CEH labs

  1. Additional Scanning Options1 h
  2. Automated Vulnerability Assessments1 h
  3. Basics of Metasploit2 h
  4. Can You Exploit Windows with Metasploit and Code Analysis?45 minAdvanced
  5. Can You Exploit Windows?45 minAdvanced
  6. Can You Explore Vulnerabilities in Systems, Network Traffic, and Passwords?45 minAdvanced
  7. Can You Find Flaws with OSINT and Vulnerability Scanning?45 minAdvanced
  8. Can You Perform DOS and AitM Attacks?45 minAdvanced
  9. Can You Perform Open-source Intelligence (OSINT)-Gathering Operations?1 hExpert
  10. Can You Perform OSINT and Host Discovery?30 minAdvanced
  11. Can You Perform OSINT by Using recon-ng, Perform Scans with Nmap & GSA, and Perform AitM Attacks?1 hExpert
  12. Client-Side Exploitation with Social Engineering1 h
  13. Core Impact Vulnerability Scan2 h
  14. Creating Recommendations Based on Vulnerability Assessments1 h
  15. Cryptography: Attacking Classic Ciphers2 h
  16. Cryptography: Breaking Repeated Key XOR Cipher4 h
  17. Cryptography: Breaking Weak RSA Keys1 h
  18. Cryptography: Decrypting Files With a Dictionary Attack2 h
  19. Cryptography: Forging Digital Signatures3 h
  20. Cryptography: Forging MACs With Side Channels2 h
  21. Cryptography: Hidden Veracrypt Containers2 h
  22. Cryptography: Man In the Middle Attack2 h
  23. Cryptography: Password Cracking1 h
  24. Cryptography: Setting Up HTTPS in Windows and Linux2 h
  25. Cryptography: Setting Up Two Factor Authentication2 h
  26. Cryptography: Steganography2 h
  27. Cryptography: Using GPG for Encryption and Key Management1 h
  28. Cryptography: Using the OpenSSL CLI Tool2 h
  29. Cybersecurity Testing with Core Impact1 h
  30. Discover and Exploit Targets by Using Metasploit30 minGuided
  31. Evasive Maneuvers and Post Exploitation1 h
  32. Execute Network Reconnaissance30 minGuided
  33. Exploit Common Windows Flaws30 minGuided
  34. Exploit Flawed Code30 minGuided
  35. Gain Remote Access to a Windows System30 minGuided
  36. Host Identification Scanning via Windows1 h
  37. Host Identification Scanning with Linux1 h
  38. Identifying System Vulnerabilities with OpenVAS2 h
  39. Intercept and Obtain Passwords30 minGuided
  40. Intro To Linux - Backing Up, Compression, and Scheduling1 h
  41. Intro to Linux - Routing and SSH Tunnels2 h
  42. Linux Exploitation1 h
  43. Manual Vulnerability Assessment1 h
  44. Monitor Network Traffic by Using Wireshark45 minGuided
  45. Nessus Scanning and Reporting3 h
  46. Nessus Setup and Config3 h
  47. Network Discovery2 h
  48. Network Miner1 h
  49. Open Source Collection2 h
  50. Open Source Password Cracking1 h
  51. OWASP Top Ten 2025 - A01 Broken Access Controls1 h
  52. OWASP Top Ten 2025 - A02 Security Misconfiguration1 h
  53. OWASP Top Ten 2025 - A03 Software Supply Chain Failures1 h
  54. OWASP Top Ten 2025 - A04 Cryptographic Failures1 h
  55. OWASP Top Ten 2025 - A05 Injection1 h
  56. OWASP Top Ten 2025 - A06 Insecure Design1 h
  57. OWASP Top Ten 2025 - A07 Authentication Failures1 h
  58. OWASP Top Ten 2025 - A08 Software or Data Integrity Failures1 h
  59. OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures1 h
  60. OWASP Top Ten 2025 - A10 Mishandling of Exceptional Conditions1 h
  61. OWASP Top Ten 2025 - Capstone3 h
  62. OWASP Top Ten 2025 - Capstone (pt.1)1 h 30 min
  63. OWASP Top Ten 2025 - Capstone (pt.2)1 h 30 min
  64. Pentesting & Network Exploitation - Linux Target Analysis Labs2 h
  65. Pentesting & Network Exploitation: DMZ Exploitation1 h
  66. Pentesting & Network Exploitation: LAN Exploitation2 h
  67. Pentesting & Network Exploitation: Windows Target Analysis Labs1 h
  68. Perform an Attacker-in-the-Middle (AitM) Exploitation30 minGuided
  69. Perform DOS Attacks30 minGuided
  70. Perform Open Source Intelligence45 minGuided
  71. Perform Open System Intelligence (OSINT) Gathering30 minGuided
  72. Perform Post-Exploit Activities30 minGuided
  73. Perform Vulnerability Scans30 minGuided
  74. Post Exploitation and Pivoting2 h
  75. Scanning and Enumeration3 h
  76. Scanning and Enumeration2 h
  77. Scanning and Mapping Networks2 h
  78. Scanning From Windows1 h
  79. Schedule and Perform Network Vulnerability Scans30 minGuided
  80. Vulnerability Scanner Set-up and Configuration1 h
  81. Windows Exploitation2 h

Roadmaps for CEH