Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Mastering Burp Suite: Complete Web Pentesting Training training are: Have basic knowledge in computer security and general understanding of the HTTP protocol.. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Mastering Burp Suite: Complete Web Pentesting Training training is available in remote. The format can be adapted to your needs (inter, intra, custom).

Mastering Burp Suite: Complete Web Pentesting Tr... | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

Only 2 spots left this month

10 spots per session maximum — 8 already taken

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Mastering Burp Suite: Complete Web Pentesting Training training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Mastering Burp Suite: Complete Web Pentesting Training training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Mastering Burp Suite: Complete Web Pentesting Training training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training access terms and deadlines

Training objectives

Install, configure, and get hands-on with Burp Suite.

Intercept, analyze, and modify decoded HTTP/HTTPS traffic via Burp Suite.

Use the main modules: Proxy, Intruder, Repeater, Scanner.

Detect and exploit Web application vulnerabilities (XSS, SQLi, CSRF…).

Automate recurring security testing tasks with Burp Suite.

Build a Web pentest methodology with Burp Suite as the central tool.

Training program

Module 1Introduction and Getting Started with Burp Suite

General presentation of Web pentesting and Burp Suite. Installation on different OS. Environment configuration (SSL certificate, browser proxy). Discovery of the interface, tour of the main modules: Proxy, Target, Dashboard, Project Options. Setting up a first interception test and initial practical exercises (traffic capture, request inspection, modification of headers and parameters).

Module 2Advanced Modules and Offensive Use

Advanced Proxy: filtering, scope and exclusion, automatic site mapping. Target: application mapping. Use of Repeater and Comparer to manipulate requests and analyze responses. In-depth discovery of the Intruder module for brute force attacks, parameter fuzzing, detection of XSS/SQLi flaws. Use of the automatic scanner (professional edition) and reading results. Exercises on real exploitation of common vulnerabilities. Automatic and manual detection of weaknesses, controlled exploitation on a secure lab.

Module 3Pentest Methodology and Automation with Burp Suite

Organization of an end-to-end pentest with Burp Suite: test preparation, objective definition, scope management. Exploitation of the extensions suite via BApp Store (Logger++, Autorize, ActiveScan++…). Advanced scripting with Burp Suite (basics of Burp Extender, introduction to writing Jython/Python extensions and API automations). Generation of professional customized reports. Final exercise on complete evaluation of a fictional Web application, preparation of a vulnerabilities report and recommendations. Q&A session, best practices for auditing in a company.

Evaluation method

MCQ (30 questions) in the form of an online quiz at the end of the training
Corrected practical work throughout the session
Final evaluation by audit of a fictional Web site

Learning method

Live sessions with step-by-step demonstrations on dedicated labs (Mutillidae, DVWA, Juice Shop)
Numerous individual or pair practical workshops
PDF course materials and reference guides provided
Access to an additional exercises platform for 14 days