SecurityTool
Burp Suite
The proxy for testing web apps by hand. Intercepting, changing and replaying requests.
About 10 hours of study.
Where to learn it
Read
Getting started with Burp Suite
PortSwigger
Getting started, then the guided tutorials
The Community Edition is free.
Watch
Practise
Web Security Academy
PortSwigger
The apprentice labs, using Burp for each one
Free labs where you exploit real vulnerabilities in a safe sandbox.
Section not checked yet
Wrong chapter, dead link, or know something better? Tell us on GitHub.
Which roles ask for it
- Penetration tester to get hired
Before and after
Burp Suite
Opens up
Nothing else on the map yet.