What's new in Burp Suite Professional? - PortSwigger
Burp Suite Professional is a web security tester's toolkit that can automate and manual testing tasks, scan SPAs and APIs, and find OWASP Top 10 vulnerabilities. Download a free trial or buy it for $449 and join over 70,000 users.
Web Security Academy: Free Online Training from PortSwigger
Learn web security from the creators of Burp Suite with interactive labs and video content. Explore topics such as SQL injection, XSS, CSRF, API testing, web cache deception and more.
SQL injection cheat sheet | Web Security Academy - PortSwigger
Learn how to perform SQL injection attacks with examples of useful syntax for different database platforms. Find out how to extract data, trigger errors, cause time delays, and more with this cheat sheet.
Installing Burp Suite Professional / Community Edition
Oct 29, 2024 · Learn how to download and install the latest version of Burp Suite, a popular web application security tool. Choose between Professional or Community Edition, and follow the steps to launch and explore Burp Suite features.
Intercepting HTTP traffic with Burp Proxy - PortSwigger
Oct 29, 2024 · Learn how to use Burp Proxy to intercept and modify web traffic in Burp Suite, a popular web security tool. Follow a tutorial with a live, vulnerable website and see the HTTP history, requests and responses.
Cross-Site Scripting (XSS) Cheat Sheet - 2024 Edition - PortSwigger
Learn how to bypass WAFs and filters with various XSS vectors for different events, tags, browsers and protocols. Download a PDF version of the cheat sheet or follow the PortSwigger Research project for updates.
All labs | Web Security Academy - PortSwigger
Learn web security skills with interactive labs covering SQL injection, cross-site scripting, CSRF, clickjacking, DOM-based vulnerabilities, CORS, XXE and more. Choose from different levels of difficulty and challenge yourself with mystery lab or blind lab.
Web Application Security, Testing, & Scanning - PortSwigger
PortSwigger offers Burp Suite, the most widely used web application security testing software. Find out more about Burp Suite Enterprise Edition, Professional, and Certification, and get access to free online web security training and resources.
JWT attacks | Web Security Academy - PortSwigger
Learn how to exploit vulnerabilities in JSON web tokens (JWTs), a standard format for sending cryptographically signed JSON data. Find out how to bypass authentication and access controls by modifying JWTs, and practice with realistic labs.
XML external entity (XXE) injection - PortSwigger
Learn what XML external entity (XXE) injection is, how it can be exploited to retrieve files, perform SSRF attacks, or exfiltrate data, and how to prevent it. See examples, labs, and techniques for finding and exploiting XXE vulnerabilities.