課程資料
課程簡介
Become a Burp Suit Certified Practitioner (BSCP) and Advance your Web Application Penetration Testing career!
Become a Portswigger Burp Suite Certified Practitioner (BSCP)
The aim of this course is to help people to prepare for the challenging Burp Suite Certified Practitioner exam.
Important notes: This course is NOT teaching the actual usage of Burp Suite and its features. This course is proving a step-by-step walkthrough through labs with detailed explanations on how to find and exploit web app vulnerabilities. The 31 core labs are also covered in my other course (Burp Suite Practitioner Labs Walkthrough) and are therefore duplicated here. This course aims at people who want to fast track the BSCP exam and don't want to go through all practitioner labs! The Tips section, golden rules incl. the cheat sheets, mystery labs, practice exams etc. are all brand new.
Your instructor is Martin Voelk. He is a Cyber Security veteran with 25 years of experience. Martin holds some of the highest certification incl. CISSP, OSCP, OSWP, Portswigger BSCP, CCIE, PCI ISA and PCIP. He works as a consultant for a big tech company and engages in Bug Bounty programs where he found thousands of critical and high vulnerabilities.
This course features the following:
Detailed walkthrough of 30 core labs as outlined by Portswigger
Walkthrough of 10 Mystery Labs where you learn how to find vulnerabilities without lab hints
Cheat Sheets on how to find flaws in all 30 vulnerability categories (useful not only for the exam)
7 Golden Tips for the exam
Practice Exam 1 and 2 walkthrough
AI Automation
Martin is solving them all and giving useful insight on how to find and exploit these vulnerabilities. He is not just inserting the payload but explains each step on finding the vulnerability and why it can be exploited in a certain way. The videos are easy to follow along and replicate. Martin is also dropping a lot of tips and tricks for those who wish to get the Burp Suite Certified Practitioner certification (BSCP). This training is highly recommended for anyone who wants to become a professional in Web Application Penetration Testing, Web Application Bug Bounty Hunting or take the Burp Suite Certified Practitioner certification (BSCP) certification.
Notes & Disclaimer
Portswigger labs are a public and a free service from Portswigger for anyone to use to sharpen their skills. All you need is to sign up for a free account. I will update this course with new labs as they are published. I will to respond to questions in a reasonable time frame. Learning Web Application Pen Testing / Bug Bounty Hunting is a lengthy process, so please don’t feel frustrated if you don’t find a bug right away. Try to use Google, read Hacker One reports and research each feature in-depth. This course is for educational purposes only. This information is not to be used for malicious exploitation and must only be used on targets you have permission to attack.
課程章節
- 7 個章節
- 53 堂課
- 第 1 章 Introduction
- 第 2 章 Exam preparation
- 第 3 章 Core Labs for the exam
- 第 4 章 Additional important Labs
- 第 5 章 Mystery Labs
- 第 6 章 Practice exams
- 第 7 章 AI Automation
課程內容
- Prepare for the Portswigger Burp Suite Certified Practitioner exam, Learn the 30 core labs for the Portswigger Burp Suite Certified Practitioner exam, Walk through 10 Mystery labs in order to prepare for the Portswigger Burp Suite Certified Practitioner exam, Receive Tips and Tricks to master the Portswigger Burp Suite Certified Practitioner exam, Practice exams walkthrough
此課程所涵蓋的技能
評價
-
KKaleb
a good overview of what's to come in the chapters. they gave a plethora of notes and links to go with the material
-
jjaroslaw nowicki
Great tutorials and great explenation worth good money .Thanks Martin again.
-
AAnthony Mckay
very good and informative...Thank you
-
NNick D
Martin provided detailed explanations on how to find and exploit web application vulnerabilities and helped us prepare for the BSCP. Doing the lab with the solutions is one thing, but the explanations often lack clarity. Being able to follow Martin's methodology and explanations is exactly what I needed. I use this course almost every week to stay up to date with web app vulnerabilities.