Cybersecurity · hands-on lab
CEH Lab 05: Gaining Access — Weak Credentials
Demonstrate, on an authorised account, how a weak SSH password is guessed — and why strong auth stops it.
- 40 minutesTime in the lab
- advancedLevel
- 4 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Phase 5 — Gaining access. The engagement scope authorises you to test the strength of one service account on target. You will show, against that single provided account, how a weak password is found with an online guessing tool — then recommend the fix. This is why password policy and MFA exist.
What you will do
- Run the authorised password test
- Record the recovered password
- What single control best stops this attack?question
- Recommend the remediation
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.