Burp Suite for Web Application Training in Kuala Lumpur, Malaysia

This course provides a practical introduction to Burp Suite, one of the most widely used tools for web application security testing. It covers installation, configuration, scanning, manual testing techniques, and automation. Participants will learn to identify and exploit common web vulnerabilities, integrate Burp Suite into security workflows, and generate actionable reports for remediation.

Introduction & Setup

• Introduction to Web Application Security

  • Web architecture basics

  • OWASP Top 10 overview

• Introduction to Burp Suite

  • Editions (Community vs Professional)

  • Installing and configuring Burp Suite

  • Setting up browsers and proxies (Firefox/Chrome)

• Burp Proxy & Target

  • Intercepting and modifying requests/responses

  • Scope definition and site map analysis

Core Tools & Vulnerability Testing

• Burp Repeater

  • Manual request crafting and testing

  • Testing authentication and sessions

• Burp Intruder

  • Automated attacks (brute force, fuzzing, parameter tampering)

  • Payloads and attack types

• Burp Scanner (Professional)

  • Automated vulnerability scanning

  • Analyzing scan results

• Burp Decoder & Comparer

  • Encoding/decoding payloads (Base64, URL, hex)

  • Comparing requests/responses for differences

• Burp Sequencer

  • Testing randomness of session tokens

Advanced Usage & Reporting

• Testing for OWASP Top 10 with Burp

  • SQL Injection, XSS, CSRF, Insecure Direct Object References

  • Security misconfigurations and input validation flaws

• Extensions & Automation

  • Burp Extender API and BApp Store

  • Using extensions for advanced testing (e.g., ActiveScan++)

• Reporting & Documentation

  • Generating professional vulnerability reports

  • Best practices for remediation recommendations

Hands-on Exercises

Summary and Conclusion