
English | Size: 5.8 GB
Genre: eLearning
Master the basics of Web Application Penetration Testing
What you’ll learn
basic web application vulnerabilities
getting started in web application penetration testing
getting started in web application bug bounty
preparing for the Burp Suite Certified Practitioner (BSCP) certification
52 ethical hacking & security videos
Burp apprentice labs solved and explained step by step
SQL injection
Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
Clickjacking
Cross-origin resource sharing (CORS)
XML external entity (XXE) injection
Server-side request forgery (SSRF)
OS command injection
Directory traversal
Access control vulnerabilities
Authentication
WebSockets
Insecure deserialization
Information disclosure
Business logic vulnerabilities
HTTP Host header attacks
OAuth authentication
File upload vulnerabilities
JWT
Essential skills
Prototype pollution
GraphQL API vulnerabilities
Race conditions
NoSQL injection
API testing
Web LLM attacks
Web Cache Deception
Apprentice Mystery Labs
Welcome to the Burp Suite Apprentice – Web Application Penetration Testing & Bug Bounty Hunting training course.
Important note: This course is NOT teaching the actual usage of Burp Suite and its features. This course is proving a step-by-step walkthrough through the apprentice labs with detailed explanations on how to find and exploit web app vulnerabilities.
Your instructor is Martin Voelk. He is a Cyber Security veteran with 25 years of experience. Martin holds some of the highest certification incl. CISSP, OSCP, OSWP, Portswigger BSCP, CCIE, PCI ISA and PCIP. He works as a consultant for a big tech company and engages in Bug Bounty programs where he found thousands of critical and high vulnerabilities.
This course features all current 52 Apprentice labs. Martin is solving them all and giving useful insight on how to find and exploit these vulnerabilities. He is not just inserting the payload but explains each step on finding the vulnerability and why it can be exploited in a certain way. The videos are easy to follow along and replicate. Martin is also dropping a lot of tips and tricks for those who wish to get the Burp Suite Certified Practitioner certification (BSCP). This training is highly recommended for anyone who wants to start out in Web Application Penetration Testing, Web Application Bug Bounty Hunting or as a pre-requisite for the Professional course towards the Burp Suite Certified Practitioner certification (BSCP) certification.
It will feature all Apprentice Labs in the following sections:
· SQL injection
· Cross-site scripting
· Cross-site request forgery (CSRF)
· Clickjacking
· Cross-origin resource sharing (CORS)
· XML external entity (XXE) injection
· Server-side request forgery (SSRF)
· OS command injection
· Directory traversal
· Access control vulnerabilities
· Authentication
· WebSockets
· Insecure deserialization
· Information disclosure
· Business logic vulnerabilities
· HTTP Host header attacks
· OAuth authentication
· File upload vulnerabilities
· JWT
· GraphQL API vulnerabilities
· Race conditions
· NoSQL injection
· API testing
· Web LLM attacks
· Web Cache Deception
· Apprentice Mystery Labs
Notes & Disclaimer
Portswigger labs are a public and a free service from Portswigger for anyone to use to sharpen their skills. All you need is to sign up for a free account. I will update this course with new labs as they are published. I will to respond to questions in a reasonable time frame. Learning Web Application Pen Testing / Bug Bounty Hunting is a lengthy process, so please don’t feel frustrated if you don’t find a bug right away. Try to use Google, read Hacker One reports and research each feature in-depth. This course is for educational purposes only. This information is not to be used for malicious exploitation and must only be used on targets you have permission to attack.
Who this course is for:
- Anybody interested in learning basic ethical web application hacking / penetration testing
- Anybody interested in learning basic ethical web application bug bounty hunting
- Anybody interested in learning how hackers hack web applications
- Developers looking to expand on their knowledge of vulnerabilities that may impact them
- Anyone interested in application security
- Anyone interested in Red teaming
- Anyone interested in offensive security

rapidgator.net/file/137032f6c49a2fa395830576c9110d29/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part1.rar.html
rapidgator.net/file/f120eff9f3dfb8031392ef4a320f3429/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part2.rar.html
rapidgator.net/file/603d530f2d213789900bf553f7bc7127/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part3.rar.html
rapidgator.net/file/6ab1b4dcaac84513c709f777f5a04f88/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part4.rar.html
rapidgator.net/file/d3bbc3dfcceedf4138ba1bb9e37e031d/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part5.rar.html
rapidgator.net/file/186c3d5106f5c858fbee2a27557a3717/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part6.rar.html
rapidgator.net/file/c3730af33300c3360b08c4ae4b85bbf4/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part7.rar.html
trbt.cc/nqne1a5k7so4/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part1.rar.html
trbt.cc/qhg1shlhor6g/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part2.rar.html
trbt.cc/n4f1gx99u8ba/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part3.rar.html
trbt.cc/tnw2y4k7va34/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part4.rar.html
trbt.cc/b46j77e5l0s2/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part5.rar.html
trbt.cc/swugwm60rqyb/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part6.rar.html
trbt.cc/mahcoy0kc4vm/UD-BurpWebSecurityAcademy-ApprenticeLabsWalkthrough2025-3.part7.rar.html
If any links die or problem unrar, send request to
forms.gle/e557HbjJ5vatekDV9