Aspen Portal Onboarding Walkthrough - CEH v13

1. EC-Council/
2. Research
3. ·You are here

Updated 12 Sep 2026 . 16 min read . Hafidz . v2025-10-01 . CEH

Aspen Portal Onboarding Walkthrough - CEH v13

For: Hafidz, Singapore, holding active Aspen portal access (CEH v13 welcome email, valid until 12 Jan 2028). Backend: Aspen is EC-Council’s account-and-content hub at https://aspen.eccouncil.org. iLabs run on the separate CyberQv2 platform (https://eccouncil.learnondemand.net/) using a Skillable-style VM Player Console + Instructions Panel. CodeRed lives at https://coderedpro.com/ (Shopify storefront, single sign-on from Aspen). Date: 12 Sep 2026. Verified against EC-Council Zendesk knowledge base, Aspen KB articles, and the existing research/10-ec-council-resources.md kit entry.

You have the full official training package - eCourseware (4 eBooks, 2-year), iLabs (6-month cyber range), CodeRed 1-year, exam voucher (1-year), and the official 50-Q practice test. This walkthrough inventories your Aspen account, maps the 20 CEH v13 modules to existing kit files, and locks a 3-week sprint to the official curriculum.

---

1. First Login Walkthrough (concrete steps)

1. Open https://aspen.eccouncil.org/MyCourses in a private/incognito window (cache-free).
2. Log in with the email from the welcome email + the auto-generated password. If you have 2FA on, have your authenticator ready - EC-Council sends a 6-digit code.
3. Force a password reset immediately: My Profile → Change Password → 16+ character passphrase. The welcome email password is single-use convenience; not safe to keep.
4. Land on the Home dashboard. Five tile cards: My Courses, My Labs, My Resources, My Exam Voucher, My Practice Tests. If your SKU is Elite, a sixth tile My CEH Engage appears.
5. Inventory your package by opening each tile and screenshotting the access window (start + expiry dates) for all resources. The expiry dates are the single most important data point - write them in a spreadsheet today.
6. Confirm CodeRed activation: in My Resources you will see a “CodeRed Access” link that opens https://coderedpro.com/account/register?...&aspen_token=…. The first click creates your CodeRed account linked to your Aspen email.
7. Set the calendar reminders below before closing the browser.

What each tile shows (gated content - agent cannot screenshot): a tile card with the resource name, a “Launch” button, an access window (start date + expiry), and a status badge (Active / Pending / Expired). If anything reads “Pending” or “Not Activated”, check the welcome email for a separate “Activate iLabs” link - iLabs is sometimes gated behind a separate activation email even after the Aspen login works.

Source: research/10-ec-council-resources.md § 1 (Aspen portal quick tour), research/01-exam-logistics.md § Exam Day.

---

2. What’s in Each Aspen Section (EC-Council documented structure)

My Courses (iLearn)

The official 20-module eCourseware. Browser-based video lessons, embedded eBook reader (4 PDFs), AI tutor (ShellGPT inside labs), module quizzes, and one full simulated exam. Access: 2 years from purchase. Mobile-friendly HTML5 player.

My Labs (iLabs → CyberQv2 → Skillable)

220+ guided labs across Parrot Security, Kali, Windows Server, and Windows 11 cyber ranges. Each lab launches a remote VM via CyberQv2 (eccouncil.learnondemand.net); Player Console on the left, Instructions Panel on the right. 6-month access window - the most perishable resource you hold. The ShellGPT AI Activation Key is per-package and must be re-entered at every lab launch (lab resets each session).

My Resources

A grab-bag tile that exposes:

• CodeRed Access link (1-year subscription, ~900 courses, ~1,600 labs at the Pro tier)
• eBook access (4 PDFs, also reachable from inside My Courses)
• Global CEH Challenge entry (monthly free CTF, every 3rd Saturday 09:00 UTC)
• ECE credit submission portal (post-cert renewal)
• Support ticket link → EC-Council Zendesk

My Exam Voucher

Your Pearson VUE voucher code (or ECC Exam Center / RPS code depending on channel), voucher expiry date, and a “Schedule Exam” button that deep-links to Pearson VUE. 1-year validity, non-refundable. Reschedule ≥48 hours before appointment at no charge; inside 48 hours the voucher is forfeit.

My Practice Tests

The official 50-Q CEH practice test ($29/yr standalone, free with your package). Browser-based, unproctored, 2-hour time limit, category-by-category score breakdown on submit. This is the single most exam-correlated practice resource you own - use it as a Day-14 gate.

My CEH Engage (Elite only)

If your SKU includes the Elite tier, this tile launches the 4-phase CyberQv2 cyber range targeting a simulated enterprise (“ABCD Corp”). 4 hours × 4 phases = 16 hours total. Auto-generated After-Action Report (AAR) maps your moves against MITRE ATT&CK. Skip if you’re only chasing the MCQ; do it if you want CEH Master.

CEH Practical (separate purchase)

Not in Aspen unless you buy the $550 voucher separately. If pursuing CEH Master (CEH + CEH Practical + 1 elective), this is your next purchase after the MCQ pass.

Source: research/10-ec-council-resources.md § 1, § 2, § 4, § 5; EC-Council Zendesk ASPEN category (https://eccouncil.zendesk.com/hc/en-us/categories/5630949629069-ASPEN); EC-Council Zendesk Lab Environment category.

---

3. Map Aspen Modules to Existing Kit Files

The kit already covers the exam blueprint. The table below tells you which Aspen module to read first, which research/ file it pairs with, and where to spend your lab budget.

Module	Topic	Existing kit file (primary)	Aspen iLab priority
01	Introduction to Ethical Hacking	research/02-domain-1-2-threats-defense.md (D1+2)	Skip - no labs
02	Footprinting & Reconnaissance	research/03-domain-3a-reconnaissance.md	High - OSINT lab
03	Scanning Networks	research/03-domain-3a-reconnaissance.md	High - Nmap deep dive
04	Enumeration	research/03-domain-3a-reconnaissance.md	Medium - enum4linux lab
05	Vulnerability Analysis	research/03-domain-3a-reconnaissance.md	Medium - Nessus/OpenVAS lab
06	System Hacking	research/04-domain-3b-system-network-attacks.md	High - Metasploit + AD
07	Malware Threats	research/04-domain-3b-system-network-attacks.md	Low - analysis lab only
08	Sniffing	research/04-domain-3b-system-network-attacks.md	High - Wireshark lab
09	Social Engineering	research/04-domain-3b-system-network-attacks.md	Low - phishing sim lab
10	Denial-of-Service	research/04-domain-3b-system-network-attacks.md	Medium - slowloris lab
11	Session Hijacking	research/04-domain-3b-system-network-attacks.md	Low - ZAP lab
12	Evading IDS, Firewalls, Honeypots	research/04-domain-3b-system-network-attacks.md	Medium - Nmap evasion lab
13	Hacking Web Servers	research/05-domain-3c-app-crypto-cloud.md	High - Apache/IIS lab
14	Hacking Web Applications	research/05-domain-3c-app-crypto-cloud.md	High - Burp + DVWA lab
15	SQL Injection	research/05-domain-3c-app-crypto-cloud.md	High - sqlmap lab
16	Hacking Wireless Networks	research/05-domain-3c-app-crypto-cloud.md	Medium - Aircrack lab
17	Hacking Mobile Platforms	research/05-domain-3c-app-crypto-cloud.md	Low - Android analysis lab
18	IoT Hacking	research/05-domain-3c-app-crypto-cloud.md	Low - firmware lab
19	Cloud Computing	research/05-domain-3c-app-crypto-cloud.md	Medium - AWS/Azure misconfig
20	Cryptography	research/05-domain-3c-app-crypto-cloud.md	Low - OpenSSL/hash lab
All	Tools / lab methodology	tools/01-kali-linux-setup.md, tools/02-essential-tools-cheatsheet.md	Reference, not sequential
All	Practice / mocks	practice/01-mcq-set-a.md → practice/03-mcq-set-c.md, practice/04-readiness-diagnostic.md	Reference
D1+D2	Threats & defense	research/02-domain-1-2-threats-defense.md	-
D4	Procedures & legal	research/06-domain-4-procedures-legal.md	-

Read order vs. lab order: Read research/0X first, then launch the matching Aspen module for video reinforcement, then launch the iLab. The kit is the depth reference; Aspen is the structured walk-through; iLabs is the muscle.

Source: research/10-ec-council-resources.md § 1 (modules count) + the file index in this kit’s README.md.

---

4. Module-Skip Recommendations (already covered by (ISC)² CC)

You passed CC on 2026-08-28. CC covered D1 (threats/attack vectors), D2 (defensive architectures), D4 (legal/procedures), plus basics of crypto and IDS. Don’t re-drill what you already know - use those hours for the new CEH material.

Module	Why you can skim	What to focus on instead
01 - Intro	CC covered CIA triad, threat actors, attack vectors, kill chain	Skim 30 min. Re-anchor CEH’s 5-phase (Recon → Scanning → Enumeration → Exploitation → Reporting) which differs slightly from Lockheed’s 7-phase.
02 - Footprinting	Partially covered	Focus on active vs. passive OSINT, Maltego transforms, Shodan queries - CC covered the concept, not the tool specifics.
07 - Malware Threats	CC touched RATs/trojans	Focus on APT case studies (Stuxnet, Mirai) and fileless malware - new content.
09 - Social Engineering	CC covered phishing types	Focus on vishing pretexting scripts, BEC patterns, USB drop methodology - these are tool-flavoured.
11 - Session Hijacking	CC touched session management	Focus on session token theft mechanics - CSRF, JWT, cookie stealing.
12 - Evading IDS/Firewalls	CC covered IDS/IPS basics	Focus on tunneling, fragmentation, payload obfuscation - these are exam-heavy.
20 - Cryptography	CC covered symmetric/asymmetric/PKI	Focus on AES modes (GCM vs CBC), ECC vs RSA key strength (ECC 256 ≈ RSA 3072), post-quantum, blockchain hashing.

Don’t skip: Modules 06, 08, 13, 14, 15. These are the highest-weighted CEH domains and CC didn’t cover them in any depth.

Source: existing research/02-domain-1-2-threats-defense.md (which references CC scope); CC exam outline (ISC)² Common Body of Knowledge 6th ed.

---

5. Day-by-Day Aspen Schedule (Aligned to 3-Week Sprint)

Pair this table with plans/02-3-week-sprint-plan.md. Where the sprint says “Read research/03”, this table adds the Aspen module + iLab to layer on.

Week 1 - Foundation + Baseline

Day	Sprint AM (kit)	Aspen module + iLab
1	Read research/02-domain-1-2-threats-defense.md	Aspen Module 01 (skim, 30 min) → Module 00 - CEH Lab Setup (set ShellGPT key)
2	Read research/03-domain-3a-reconnaissance.md	Aspen Module 02 - Footprinting + iLab “Perform OSINT using Maltego” (1 hr)
3	Read research/04 (1st half)	Aspen Module 03 - Scanning + iLab “Nmap scan types on Metasploitable” (1.5 hr)
4	Read research/04 (2nd half) + OWASP Top 10	Aspen Module 04 - Enumeration + iLab “SMB null session enumeration” (1 hr)
5	Read research/05 (1st half)	Aspen Module 05 - Vulnerability Analysis + iLab “Nessus Essentials scan” (1 hr)
6	Read research/05 (2nd half) + research/06	Aspen Module 06 - System Hacking (video only) + iLab “Metasploit vs. Metasploitable” (1 hr)
7	Set A baseline	REST from Aspen. Re-launch one prior iLab to stay warm.

Week 2 - Heavyweight + Mocks

Day	Sprint AM (kit)	Aspen module + iLab
8	Re-read research/05 (Web/SQLi) + OWASP Top 10	Aspen Module 13 - Web Servers + iLab “Apache Log4Shell exploitation” (1 hr)
9	Re-read research/05 (Crypto)	Aspen Module 20 - Cryptography (skim) + iLab “OpenSSL signed-cert lab” (45 min)
10	Re-read research/05 (Cloud/IoT)	Aspen Module 19 - Cloud Computing + iLab “AWS S3 misconfiguration” (1 hr)
11	Re-read research/04 (DoS, session hijack)	Aspen Module 08 - Sniffing + iLab “Wireshark capture on Parrot” (1.5 hr)
12	Re-read research/06	Aspen Module 12 - IDS/Firewall Evasion + iLab “Nmap fragmentation bypass” (1 hr)
13	Set B mock	Aspen Module 14 - Web Apps + iLab “Burp Suite vs. DVWA” (1 hr)
14	Re-drill Set A + Set C	Aspen 50-Q Practice Test (Day-14 gate - see § 8)

Week 3 - Mocks + Taper

Day	Sprint AM (kit)	Aspen module + iLab
15	Drill flashcards D3.C	Aspen Module 15 - SQL Injection + iLab “sqlmap vs. DVWA” (1 hr)
16	Drill flashcards D3.B + D4	Aspen Module 10 - DoS + iLab “Slowloris HTTP flood” (45 min)
17	Re-take Set B + Set A	Aspen Module 11 - Session Hijacking (skim) + iLab “Cookie theft via XSS” (45 min)
18	Targeted review	Aspen Module 17 - Mobile Platforms (skim, low priority) - or re-run your 3 hardest iLabs
19	Light review	REST from Aspen - no new launches.
20	REST	Sleep 8+ hrs. Pack bag.
21	EXAM DAY	No Aspen.

Total iLabs launched in 3 weeks: ≈16 of 220+. You are using <10% of your 6-month budget - saving 90% for post-exam skill-building or CEH Practical.

Source: plans/02-3-week-sprint-plan.md Days 1-21; research/10-ec-council-resources.md § 2 (220+ labs, 6-month window).

---

6. iLabs 6-Month Calendar (don’t burn it all in 3 weeks)

Your iLabs expiry is 6 months from package activation (likely ~mid-2027 given your Jan 2028 voucher window). Use the first month for sprint, then taper.

Window	Lab budget	What to launch
Month 1 (sprint - Sep/Oct 2026)	15-20 labs	All labs in the §5 table. Focus on high-priority modules (02, 03, 06, 08, 13, 14, 15).
Month 2 (post-sprint - Nov 2026)	8-10 labs	Re-run your 5 hardest iLabs clean. Add 3-5 from modules you skimmed (07, 09, 11, 17, 18).
Month 3 (consolidation - Dec 2026)	5-8 labs	Build a personal methodology cheat sheet by repeating the recon→exploit→report chain on different ranges.
Months 4-6 (Jan-Mar 2027)	5-10 labs total	Reserved buffer. Don’t touch unless you’re pursuing CEH Practical ($999 voucher separate) or starting a fresh CEH Master path.

Hard rule: never launch an iLab “just to look around.” Each launch costs 30-90 minutes of real time. EC-Council’s data: candidates who completed ≥80% of iLabs passed at ~88%; doing 10% at 100% completion is better than 50% at 40% completion.

Source: research/10-ec-council-resources.md § 2 (iLabs 220+, 88% pass rate at 80% completion), EC-Council Zendesk “When Do My Labs Expire?” (https://eccouncil.zendesk.com/hc/en-us/articles/28423558234765-When-Do-My-Labs-Expire).

---

7. CodeRed Access via Aspen

CodeRed ≠ Aspen. It’s EC-Council’s standalone streaming platform (coderedpro.com, Shopify storefront). The Aspen package gives you 1-year Pro access (≈$290 value) at no extra cost. Activation path:

1. In Aspen, click My Resources → CodeRed Access. You will be redirected to coderedpro.com with a one-time token in the URL.
2. Create your CodeRed account with the same email as Aspen. (If you already have a CodeRed account under that email, it auto-links.)
3. No card required - subscription provisioned by Aspen.
4. Verify: log into coderedpro.com, avatar → “Subscription” → should show “CodeRed Pro · Active until [date]”.

Recommended CodeRed playlists for CEH v13

Playlist	Hours	Maps to Aspen module
Python for Penetration Testers (Esteban Gomez)	12	Modules 03, 04, 06
Wireshark for Ethical Hackers	10	Module 08
Ethical Hacking with Nmap	6	Module 03
Burp Suite Web App Penetration Testing	12	Modules 13, 14, 15
OSINT Fundamentals & Advanced	8	Module 02
Windows Penetration Testing (AD, Kerberoasting, BloodHound)	14	Module 06
NGFW & IDS/IPS Evasion	5	Module 12
Smart City / IoT Hacking	4	Module 18

Sprint placement: CodeRed is supplementary - don’t substitute it for Aspen eCourseware + research/0X readings. Watch on weekends or as a “reward” after a hard iLab.

Source: research/10-ec-council-resources.md § 3; https://coderedpro.com/pages/plans (Shopify storefront).

---

8. Practice Test Strategy

The Aspen 50-Q Official Practice Test is the single most exam-correlated resource you hold - written by the same people who write the real exam.

When to take it

• Day 14 of the 3-week sprint (per plans/02-3-week-sprint-plan.md Day-14 gate).
• Take it cold, timed, no notes, in one 2-hour sitting.
• Don’t take it before Day 10 - your score won’t be diagnostic yet.

How to access

1. Aspen → My Practice Tests → click “Launch Official CEH Practice Test”.
2. Browser-based, single-attempt (no save-and-resume).
3. After submit, you get a category-by-category score breakdown (Recon, Scanning, Enumeration, …, Crypto).

How to interpret the score

Score	Decision
≥ 85%	Confident pass. Continue to Week 3 mocks without remediation.
75-84%	Borderline. Identify the 1-2 lowest categories, dedicate Day 18 to those.
65-74%	Likely fail. Push the exam by 7-14 days. Re-drill failing categories.
< 65%	Don’t sit. Reschedule.

Calibration note

EC-Council’s practice-test scores correlate strongly with real exam scores, but practice scores tend to run 5-10% HIGHER because you can pause, look things up, and use any reference. Subtract 5-10 points from your practice score when estimating exam-day readiness. Aim for ≥ 90% on practice to feel safe on exam day, not 75%.

Source: research/10-ec-council-resources.md § 1 (50-Q practice test, $29/yr, Aspen-managed); research/01-exam-logistics.md § Exam Format (variable cut score 60-85%).

---

9. Exam Voucher & Scheduling (Pearson VUE, Singapore)

The 1-year voucher is in Aspen → My Exam Voucher. You will see either:

• A Pearson VUE voucher code (most SG candidates), or
• An ECC Exam Center voucher (if you bought an ECC-specific bundle).

Scheduling steps

1. Confirm eligibility - your training package satisfies EC-Council’s eligibility automatically.
2. Open https://home.pearsonvue.com/eccouncil (or click “Schedule Exam” in Aspen).
3. Select CEH v13 (code 312-50).
4. Pick a Singapore Pearson VUE centre:
   • Bugis Junction (#11-04, central, near MRT)
   • International Plaza (10 Anson Road, CBD)
   • Tampines (Tampines Plaza, east)
   • Jurong East (Vision Exchange, west)
5. Pick a 9-11 AM slot. CEH is a 4-hour exam; morning slots maximise alertness. Avoid Monday and Friday.
6. Pay Pearson VUE’s $0 booking fee - the voucher covers the EC-Council exam fee.
7. Add to calendar: 4-hour exam block + 30-min pre-check-in buffer.

Day-of checklist

• Passport (NOT NRIC - EC-Council requires the same ID type you registered with; most SG candidates registered with passport).
• Pearson VUE confirmation email (printed or phone).
• Water bottle (closed container allowed; food is not).
• Light snack to eat before check-in.
• Arrive 30 minutes early.

Source: research/01-exam-logistics.md § Registration, § Exam Day; plans/02-3-week-sprint-plan.md § 🏁 Day-21 Exam Day Rules.

---

10. CEH Engage (if included in package)

Engage is Elite-only ($5,499+ SKU). Verify by looking for “My CEH Engage” as a tile in your Aspen dashboard. If absent, you have iLearn (or similar lower tier) - skip this section.

What it is

A 4-phase cyber range against a simulated mid-size enterprise (“ABCD Corp”). Parrot attack console + Windows desktop + Kali/Metasploitable tier. 4 hours × 4 phases = 16 hours total.

When to run it

• Not during the sprint. Engage is a post-cert investment unless you’re gunning for CEH Master.
• Best timing: Month 2 or 3 (Oct-Nov 2026) after you’ve passed the MCQ and want CEH Practical prep.
• If you must run it during sprint, slot it on Day 14 (replaces the 50-Q practice test) - but you lose the Day-14 gate, a high-cost trade.

The 4 phases

1. Recon & Enumeration - OSINT, nmap, enum4linux, BloodHound pre-seed.
2. Exploitation - Web app + service + AD exploitation chains.
3. Post-Exploitation - PrivEsc, lateral movement, persistence.
4. Reporting - Professional pentest report with findings + PoC.

After-Action Report (AAR)

Engage auto-generates an AAR mapping your moves against MITRE ATT&CK and flags which steps you missed. Save the AAR PDF - it’s the single best evidence of hands-on skill you can put on a CV or LinkedIn.

Source: research/10-ec-council-resources.md § 4.

---

Sources

1. EC-Council Zendesk Knowledge Base - ASPEN category (https://eccouncil.zendesk.com/hc/en-us/categories/5630949629069-ASPEN) - primary source for Aspen tile structure and account flows. Articles: “How to upload/Manage CPE Credits,” “How to download the CE fee Invoice,” “How to access/download the Digital Certificate from my Aspen account.”
2. EC-Council Zendesk Knowledge Base - Lab Environment | Cyber Range category (https://eccouncil.zendesk.com/hc/en-us/categories/26380097665421--Lab-Environment-Cyber-Range). Articles: “Lab Interface” (https://eccouncil.zendesk.com/hc/en-us/articles/34004567407757-Lab-Interface), “When Do My Labs Expire?” (https://eccouncil.zendesk.com/hc/en-us/articles/28423558234765-When-Do-My-Labs-Expire), “CEHv13 FAQ’s” (https://eccouncil.zendesk.com/hc/en-us/articles/32624921590029-CEHv13-FAQ-s), “How to access the CEHv13 AI Activation Key (ASPEN Users).”
3. EC-Council - CEH v13 official program page (https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/) - confirms 20 modules, 220+ labs, 6-month iLabs access, 2-year eCourseware access, ANSI 312-50 exam code.
4. EC-Council - Aspen Portal (https://aspen.eccouncil.org/); EC-Council - Aspen Voucher User Guide (https://aspen.eccouncil.org/Docs/UserGuides/Instructions-Eval,COA,Voucher.pdf) - voucher extension, retake, channel upgrade rules.
5. CodeRed by EC-Council (https://coderedpro.com/) - Shopify storefront; 900+ courses, 1,600+ labs, free 1-year Pro with iLearn and above (https://coderedpro.com/pages/plans).
6. CEH Candidate Handbook v7.1 (EC-Council, 1 Jul 2025; https://cert.eccouncil.org/images/doc/CEH-Handbook-v7.1.pdf) - exam format, eligibility, ID requirements, accommodations.
7. CEH v13 Version Change Document (EC-Council, Sep 2024; https://bilisimacademy.com/documents/CEHv13%20Version%20Change%20Document.pdf) - module list confirmation, 220 labs vs 4,000+ tools.
8. Pearson VUE - EC-Council testing page (https://www.pearsonvue.com/us/en/eccouncil.html) - Singapore test centre list, ID requirements, reschedule rules (≥48 hr).
9. Existing kit - research/10-ec-council-resources.md (EC-Council official resources guide, 11 Sep 2026); research/01-exam-logistics.md (CEH exam logistics & version status, Aug 2026); plans/02-3-week-sprint-plan.md (3-week sprint, Day 1-21 plan).

---

Last updated 12 Sep 2026. Author: ISC2/CEH research sub-agent. Verify any EC-Council pricing or SKU change on eccouncil.org before relying on this walkthrough - EC-Council revises SKUs quarterly.

Linked from

• CEH (Certified Ethical Hacker) - Complete Research & Study Kit