Skip to main content
Log in

Web Testing with Burp Suite & Secure Coding

Use an intercepting proxy to observe, replay and assess web traffic, then turn findings into fixes: parameterised queries, output encoding, CSP, cookie flags and authorisation checks. You will also rate risk and write a clear remediation recommendation.

Web Application Security
Level
Advanced
Study time
9 hours
Lessons
5
Practice labs
3
Assessments
2
Format
Self-paced, online

What you will learn

By the end of this course you will be able to:

  • Configure the concept of an intercepting proxy with a scope limited to an authorised target
  • Review captured HTTP traffic and identify missing headers, cookie flaws, information leaks and authorisation gaps
  • Replay and modify requests in a Repeater-style workflow to confirm a finding
  • Review source code, name the bug and apply the correct fix (parameterised queries, encoding, authorisation, hashing)
  • Rate a finding with likelihood x impact and CVSS basics and write a remediation recommendation

Before you start

Course: OWASP Top 10 in Practice (or equivalent knowledge of common web vulnerabilities)

Tools you will use

  • Burp Suite Community
  • OWASP ZAP
  • Browser developer tools
  • Simulated Repeater console

Course outline

5 lessons in 2 modules.

Module 1: Intercepting proxies and traffic analysis

  • Intercepting proxies: Proxy, Repeater, Intruder and scope
  • Reading requests and responses for weaknesses

Module 2: Remediation and reporting

  • Secure coding fixes: queries, encoding, authorisation and validation
  • Security headers, cookie flags and CSP
  • Risk rating and writing a remediation recommendation

Practice labs and assessments

Labs run in the browser as simulations. They never touch a real system.

3 practice labs

  • Proxy history review and header audit Beginner, 30 min
  • Confirm findings in Repeater Intermediate, 40 min
  • Secure code review: the checkout service Advanced, 50 min, final lab

2 assessments

  • Proxy testing knowledge check
  • Web testing and secure coding final quiz

The pass mark is 70%. You can retake an assessment.

Previous courseOWASP Top 10 in Practice

Take Web Testing with Burp Suite & Secure Coding

Request access and your instructor will set up your account.

Log in