intermediate1650 points on offer

Burp Suite for Hackers

Hands-On Labs in Web Application Attack

5 modules27 labs~14 hours

Foundations and building the web lab

How the web really works and what you are authorised to touch, then build the isolated network, the Kali/Burp box, two training web apps, and Burp's proxy and CA certificate.

6 labs390 ptsBSH-Kali

locked

Proxy, mapping the application, and understanding requests

Intercept live traffic with the Proxy, read an HTTP request and response line by line, map an application's attack surface, and replay modified requests in Repeater.

5 labs290 ptsBSH-Kali

locked

Authentication, sessions, and injection

The classics, against your own training apps: weak authentication, session and cookie handling, SQL and command injection, Intruder fuzzing, and insecure file upload.

6 labs370 ptsBSH-Kali

locked

XSS, access control, and business-logic flaws

Reflected and stored cross-site scripting, broken access control and IDOR, cross-site request forgery, business-logic abuse, and the misconfigurations that leak information.

6 labs350 ptsBSH-Kali

locked

Reporting and the web-assessment capstone

Write a web finding up properly — evidence, severity, reproduction and retest — then run an end-to-end web assessment against the lab and reset it cleanly.

4 labs250 ptsBSH-Kali

locked