How to prepare for the Burp Suite Certified Practitioner exam
Summary: PortSwigger's guide to preparing for the Burp Suite Certified Practitioner exam recommends working through a set list of Web Security Academy labs without using the provided solutions, then using a mystery lab challenge that spins up five randomized practitioner-level challenges with no context. It also points candidates to practice exams - one vulnerable application to exploit in two hours - and says anyone who fails a practice exam should repeat the guide's steps.
Key Takeaway: The certification is pitched as proof of deep knowledge of web vulnerability classes and the ability to discover and exploit them, and the guide's own benchmark is completing the labs without access to the solutions - a bar that separates people who can find and exploit flaws from those who can only follow walkthroughs.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026