The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Do the vuln classes on the burp suite certified practitioner align with the vuln classes available in the Mystery labs?

Nate | Last updated: Oct 18, 2023 06:07PM UTC

Hello, I've been pursuing the Burp Suite Certified Practitioner for approximately the past year. After completing the recommended study material listed here: https://portswigger.net/web-security/certification/how-to-prepare I took the exam and failed. I then made a daily ritual to completing mystery labs, in order to prepare myself for the exam. After 6 failed exam attempts I am starting to get the sense that there are vulns on the exam that are not available through mystery labs. Can you confirm or deny if this is the case? For example, some of the new topics (NoSQL Injection and Race Conditions) are not yet available through mystery labs, but I believe I came across a race condition on my most recent exam attempt. I feel like there is a massive gap between the study recommendations and the exam itself. Any help is appreciated, I really want to know what's missing for me to earn this certification!

Ben, PortSwigger Agent | Last updated: Oct 19, 2023 01:13PM UTC