PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Web Security Academy - your questions answered

portswigger.net | blog | #sql-injection | #xss | #labs | #web-security-academy | #learning | #ssrf | #faq
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PortSwigger answers common questions about the Web Security Academy, covering recommended starting topics like SQL injection, the suggested learning path, and practising with Burp Intruder.
Published
Collected

Related coverage

blog · portswigger.net
Flying high in the Web Security Academy
PortSwigger interviews three top-ranked Web Security Academy users, who ranked 2nd, 4th and 6th and completed all 197 labs. They share study tips and advice for getting the most from the labs.
blog · portswigger.net
New learning paths, from the Web Security Academy
The Web Security Academy introduces structured learning paths with progress tracking; the first two cover server-side vulnerabilities at apprentice level and the essentials of SQL injection.
blog · portswigger.net
The Burp challenge
PortSwigger's Burp challenge runs until 31 December 2022 — completing four stages of labs and a practice exam earns a free BSCP exam credit, with weekly mini challenges offering extra prizes.
blog · portswigger.net
Introducing the mystery lab challenge
The Web Security Academy's new mystery lab challenge generates a random lab without telling you the vulnerability type, adding in-application recon to better mirror real-world pentesting.
blog · portswigger.net
A one million milestone for the Web Security Academy
The Web Security Academy reaches one million users 13 years after The Web Application Hacker's Handbook. Launched in April 2019 with four topics, it now offers nearly 150 free interactive labs.
blog · portswigger.net
Introducing the Web Security Academy
PortSwigger launches the free Web Security Academy with interactive vulnerability labs covering four classic topics: SQL injection, XSS, OS command injection, and file path traversal.
Back