📡
CyberSecurity
  • 🔧Welcome
  • DevSecOps
    • Container Security
      • Kubernetes
    • Infrastructure as Code - IaC
    • Dynamic Application Security Testing - DAST
    • Static Application Security Testing - SAST
    • Software Bill of Materials - SBOM
    • Software Composition Analysis - SCA
    • Source Code Audit
      • PHP Code Review
      • Secure By Design Libraries
    • IDE Plugins for Developers
    • Security Hardening
    • Secure Coding
    • Cheatsheets
    • DumpingGround
    • Mobile
    • Cloud Security
  • OSINT
    • Browser Extensions
    • Default Creds
    • Scam Searching
    • Weather
    • Image Recognition and Reverse Image Searching
    • Network recon
    • Telegram
    • Street Address
    • Businesses
    • Leaked data / Breaches
    • Shodan
    • Airplanes
    • Maritime
    • Vehicle
    • Usernames
    • Geolocation
      • Educational Gamez
    • Code searching
    • Social Media
      • Snapchat
      • LinkedIn
      • Facebook
      • Instagram
      • Twitter
    • Search Engine Dorking
    • Emails
    • Phone numbers
    • People
    • Web
      • Screenshooting
    • Assets
    • External resources
    • OSINT Mindmap Software
    • Attack Surface Management
    • OSINT Learning
    • Uncategorized
    • Phishing
  • Penetration Testing
    • Certification Prep
      • TCM PNPT
        • Training Environments
          • THM Networks Takeaways
      • Burp Suite Certified Practitioner
        • What to look for
          • By vulnerability type
            • 403bypass
            • HTTP Request Smuggling
            • Business Logic
            • HTTP Host Header
            • HTTP Verb Tampering
            • Information Disclosure
            • WAF Evasion
            • Insecure Deserialization
              • Remediation
            • XSLT Injection
              • Remediation
            • CSV Injection
              • Remediation
            • Access Control
            • Web Auth
              • Remediation
            • IDOR
              • Remediation
            • OpenRedirect
              • Remediation
            • SSRF
              • Remediation
            • CSTI
              • Remediation
            • SSTI
              • Remediation
            • LFI|RFI
              • Remediation
              • Directory Traversal
            • CRLF
              • Remediation
            • CSRF
              • Remediation
            • CORS
            • XXE
              • Remediation
            • File Upload
              • Remediation
            • SQLi
              • Remediation
            • XSS
              • Remediation
            • XPath Injection
              • Remediation
            • Command Injection
              • Remediation
            • RCE
              • Remediation
        • Cheatsheets
        • API Testing
        • Checklists
        • Reporting
          • Note Taking
          • Examples
          • Bug Bounty Reports
          • Tools
          • Helpful links
          • Youtube
        • Remediation
        • Useful tools
        • Browser Add-ons or Extensions
      • SecOps CAP
        • Overview
        • Topics
          • Common Supply Chain Attacks and Prevention Methods
          • Vulnerable and Outdated Components
          • Information Disclosure
          • Security Misconfigurations
          • Directory Traversal Vulnerabilities
          • Business Logic Flaws
          • Code Injection Vulnerabilities
          • Insecure File Uploads
          • Authorization and Session Management related flaws
          • Server-Side Request Forgery
          • TLS Security
          • Security Best Practices and Hardening Mechanisms
          • OWASP Top 10
          • Authentication related Vulnerabilities
          • Encoding, Encryption and Hashing
          • Cross-Site Request Forgery
          • XML External Entity Attack
          • SQL Injection
          • Cross-Site Scripting
          • Input Validation Mechanisms
      • OffensiveSecurity OSCP
      • Zero Point Security CRTO
      • PentesterAcademy CRTP
      • eLearnSecurity eJPT
    • Phishing
    • Vehicle Security
    • GENERAL-RESOURCES
      • Sock Puppeting
        • Fake-Sms
        • Generators
        • Anonymity
          • Youtube
          • Twitter
        • Temporary Email Addresses
      • Public vulns/exploit dbs
      • Payloads
      • Wordlists related
        • Extensions
        • Wordlist Managing
        • Premade
        • Passwords list profiler
        • Usernames list creators
        • Wordlist Mangling
        • Custom
      • WIP
    • Web
      • Content Management Systems
        • Drupal
      • Dumpground
      • Web App Security Training
    • Infrastructure
      • AD
      • Windows
      • Linux
      • Stuffuri
      • Routers
      • Bluetooth
      • Wi-Fi
      • Cheatsheets
      • Techniques
      • Report Templates
      • VLAN
      • Terraform
      • AV Evasion
      • Command and Control tools
      • Malware Development
      • macOS
    • Mobile
    • Walkthroughs
      • PWNEDLABS Identify the AWS Account ID from a Public S3 Bucket
      • TryHackMe Anthem
      • TryHackMe AttacktiveDirectory
      • TryHackMe Vulnnet: Active
      • TryHackMe Ice
      • TryHackMe Blueprint
      • TryHackMe VulnNet: Roasted
      • TryHackMe Post-Exploitation Basics
      • TryHackMe Lookback
Powered by GitBook
On this page
  1. Penetration Testing
  2. Certification Prep

Burp Suite Certified Practitioner

PreviousTHM Networks TakeawaysNextWhat to look for

Last updated 1 year ago

What to look for
Cheatsheets
API Testing
Checklists
Reporting
Remediation
Useful tools
Browser Add-ons or Extensions