This is important because web application penetration testing needs automation scans so that, in the first instance, common problems can be rapidly detected. These necessary scans can be done in the course “Crawl and Scan with Burp Suite - Ricardo Reimao.” The objective is to assist you in identifying, for instance, locations that SQL Injections or cross-site scripting can attack.
"For anyone serious about web security, Burp Suite is a must-have tool. Its intuitive interface and powerful features make it a favorite among penetration testers."
— PortSwigger Web Security, developer of Burp Suite.
The first fundamental lesson allows you to learn how to perform the ‘crawl’ step, which means that with the help of Burp Suite, you have to map a website's content under test. This step is rather important for the test since it gives an insight into the structure of the website under test and the components that make it up. Then, you will progress to the step of executing the automated type of scan. These scans are assumed to be able to look for these common vulnerabilities independently, without wasting much time, and avoid cases where important vulnerabilities are overlooked.
Lastly, the course “ Crawl and Scan with Burp Suite - Ricardo Reimao” will teach you how to create different reports from the obtained scans. They are useful in recording your discoveries and making recommendations that can be implemented. At the end of this course, you will be well prepared to employ Burp Suite for web application penetration tests to increase the efficiency of your work.
Crawl and Scan with Burp Suite - Ricardo Reimao Table of Contents:
- Course Overview (trailer)
- Course Overview: 1m 18s
- Crawling Web Targets (21m 20s)
- Understanding Crawling: 2m 53s
- Defining the Scope: 3m 52s
- Crawling a Website: 8m 26s
- Reviewing the Results: 6m 7s
- Scanning with Burp Suite (18m 14s)
- Understanding Web App Scanning: 2m 37s
- Running a Preset Scan: 5m 58s
- Running a Custom Scan: 9m 38s
- Reporting Findings (16m 53s)
- Understanding Scan Results: 2m 50s
- Reviewing the Scan Results in Burp: 5m 15s
- Generating Vulnerability Reports: 5m 59s
- Course Closure
- Course Closure: 2m 47s
Who is this course for?
- Aspiring Penetration Testers: This involves people who know the basics of cybersecurity and are willing to focus on web application cybersecurity.
- Junior Security Analysts: Amateurs who seek learning material to help them understand new and better ways of exposing the vulnerabilities of different web pages.
- Developers and QA Engineers: If you are interested in the details of the security threats for web applications, you can create better-secured code and detect problems at the beginning of the process.
- IT Security Professionals: People who want to refresh their knowledge and gain information about automated vulnerability scanning using one of the best tools in the market.
- Students in Cybersecurity Programs: The second is for people who have completed the basics of web app security and want to move to the next level.
