bscp notes
  • Resources
  • Exam Hints/Tips
  • Burp dynamic header in Intruder
  • Methodology
  • Payloads
  • Stage 1
    • XSS
    • Information disclosure
    • DOM-based
    • Web Cache Poison
    • Host Headers
    • HTTP Req Smuggling
    • Authentication
  • Stage 2
    • oAuth
    • CSRF
    • Password Reset
    • SQLi
      • SQLi Cheat Sheet
    • JWT
    • Prototype Pollution
    • API Testing - TODO
    • Access Control
    • CORS
  • DATA EXFILTRATION
    • XXE Injections
    • SSRF
    • SSTI
    • Path Traversal
    • File Upload
    • Insecure Desarialization
    • OS Cmd Injection
  • graphql api vulns
  • no sql
  • web cache deception
  • clickjacking
  • websockets
  • web cache deception
Powered by GitBook
On this page

Resources

NextExam Hints/Tips

Last updated 7 months ago

LogoPortswigger Mystery labs — my methodologyMedium
LogoGitHub - botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study: Burp Suite Certified Practitioner Exam StudyGitHub
LogoSQL injection cheat sheet | Web Security AcademyWebSecAcademy
LogoBurp-Suite-Certified-Practitioner-Exam-Study/wordlists at main · botesjuan/Burp-Suite-Certified-Practitioner-Exam-StudyGitHub
LogoHow to pass the Portswigger Burp Suite Certified Practicioner on your 1st tryMedium