Tools / Security
Burp Suite
The proxy for testing web apps by hand. Intercepting, changing and replaying requests.
About 10 hours of study. It builds on The web and HTTP.
Where to learn it
PortSwigger
Getting started, then the guided tutorials
The Community Edition is free.
PortSwigger
The apprentice labs, using Burp for each one
Free labs where you exploit real vulnerabilities in a safe sandbox.
Section not checked yet
Wrong chapter, dead link, or know something better? Tell us on GitHub.
Your route to Burp Suite
Pick where you’re starting from. Anything your background already covers is left out, and the rest is put in order.
4 stops to go, about 93 hours of study.
Open a stop to see the book, the video course and the practice for it. Tick its circle when you've finished.
- 40 h
Programming. Ready to start.
- 35 h
Systems. After Programming in Python.
- 8 h
Systems. After Computer networks.
- Tool10 h
Security. After The web and HTTP.
That's the whole route to Burp Suite.
Which roles ask for it
- Penetration tester to get hired
What it needs and what it leads to: Burp Suite on the map.