认证道德黑客 Certification
授权进攻性测试，端到端全流程
Key facts
- Level: Professional
- Field: Cybersecurity & Information Security
- Estimated study time: about 40 hours
- Credential price: $213
- Exam: 110 questions · 180 minutes · pass mark 75%
About the 认证道德黑客 certification
认证道德黑客资质验证您能够在完整的攻击生命周期中规划并执行授权的安全评估——并将每一项发现转化为防御措施。其核心原则不可动摇：道德黑客的每一项行动都必须有书面授权、明确范围和交战规则的支撑。同样的技术手段——一次端口扫描、一次漏洞利用尝试——在授权情形下是专业服务，未经授权则构成犯罪。区分道德黑客与不法分子的，是授权、范围与意图，而非技能或工具。 您将从概念层面系统贯穿完整的渗透测试生命周期——侦察与踩点、扫描、枚举、漏洞分析、利用、后渗透、痕迹清除意识与报告撰写——将攻击者行为映射至MITRE ATT&CK框架和网络杀伤链。考试涵盖OSINT与踩点、网络扫描与枚举概念、CVSS评分与基于风险的优先排序、系统入侵与权限提升加固、恶意软件家族与防御措施、嗅探与中间人攻击防御、社会工程学与安全意识、拒绝服务与会话劫持缓解措施、IDS/IPS/防火墙/蜜罐规避概念及防御者应对策略、OWASP Top 10及修复方案、通过参数化查询防御SQL注入、无线安全（WPA2/WPA3）、移动安全、IoT/OT安全、云安全测试，以及密码学与弱加密攻击。 全程强调防御性与专业性：您学习技术原理，目的是发现、优先处理并修复弱点——而非造成危害。本认证与工具无关，传授的是工具类别与方法论，而非具体命令或攻击载荷。
What you will learn
The official 认证道德黑客 study course covers:
- Authorization, Scope & Ethics — The legal and ethical foundation: written permission, rules of engagement, and the duty to do no harm — what makes hacking ethical.
- The Attack Lifecycle: Recon to Reporting — The phases from footprinting through reporting and retest, and how each feeds the next.
- MITRE ATT&CK & the Cyber Kill Chain — Mapping adversary behaviour to tactics and techniques, breaking the chain early, and red/blue/purple teaming.
- OWASP Top 10 & Web Application Defense — The major web risks explained conceptually, each paired with its remediation.
- System Hacking, Malware, Network & Wireless Defense — Privilege-escalation hardening, malware families, sniffing/MITM, DoS, session hijacking, IDS/IPS, and wireless.
- Cloud, Crypto, CVSS, Vulnerability Management & Reporting — Cloud/mobile/IoT security, cryptography, scoring with CVSS, the vuln-management loop, and reports that drive fixes.
- 动手实验——从侦察到报告 — 在 Google Colab 中完成的 CEH 顶点项目：执行侦察和枚举，模拟端口扫描和漏洞评估，分析凭据和无线攻击，并交付完整的参与报告。纯 Python，免费，且严格符合道德规范——仅使用自有数据。
Prerequisites
Frequently asked questions
- Is the 认证道德黑客 certificate verifiable?
- Yes. Every issued Hootix Academy certificate carries a unique credential code that anyone can verify online.
- How is the 认证道德黑客 exam structured?
- It is a 180-minute ID-verified multiple-choice exam of 110 questions; you need 75% to pass.
- Do I need to buy the course to take the exam?
- Each certification is sold three ways: the exam on its own, the online course on its own, or both together as a Course + exam bundle (the bundle price is the course price plus the exam price).
- How long does the 认证道德黑客 course take?
- About 40 hours of self-paced study.