Burp Suite Certified Practitioner - Practice Exam Walkthrough 

Can someone verify part 1 still works? I did it the other day and got the cookie from Carlos. I have been trying the same way I did before as well as trying different encoding today and cannot get it to work. No cookie ever shows up in the log of the exploit server... Thanks

I've seen this cert around a lot, thank you!

I've just started my journey in cyber security and I followed you on twitter. You are helping me a lot. I wish the best for you and I hope you continue uploading vidoes

Thanks andy. Keep us posted when u take the exam

Big man ! Thank you for sharing.

Sir, Thank you for sharing.

Bravo...thanks for this!

I’m confused how does the script (exploit) redirect work Where did you paste it from ?? It wasn’t zoomed in enough to see it fully

please make more video about portswigger acamedy labs

Did I need finish al port swigger labs to start the exam ?

Thank you so much for putting this video together. This was extremely helpful and much more instructive on the DOM XSS vulnerability.

burp is strong and useful.

I was able to get my own cookie being redirected but I cannot see carlos. I see my own cookies on the GET URL but not on the access log when I view andy parameter, same for my own.

Hi andy, do you still remember how long does the sql injection takes? cause from what i know level 5 and risk 3 takes quite some time and the exam is only 4 hours

I'm a beginner, please ask permission. whether the issues or bugs I found through Burp Suite Professional using Burp Bounty Pro are valid bugs. or should be in more in-depth testing. thank you so much for the answer.

Burp has released a new practice exam, will there be a walkthrough?

Hey Andi, thanks for the vid. In your opinion, how many hours of study and practice would it take to get ready for this exam?

i get the error "ERROR IN YSOSERIAL COMMAND. SEE STDERR FOR DETAILS" when trying to expliot the java deserilzation

Thanks, your video truly help. can you make a video explaining how you built your script for dom find nor query work?

justgot into part three, java deserialization, when running the attack after finding out how its encoded, it comes back as nothing being vulnerable..... anyone recently do this?!? so frustrating!

When you publish the next video ?

Thx for great content. I think that the exam is 4 hours long. In video was mentioned that 2 hours ;)

why was dabase name and table name obvious to you

at 8:50 or so min mark, where did you copy the script from exactly?

can anyone help in what is the payload for the first step, (dom xss) i tried everything but nothing works, i can get my own cookie in the logs but not carlos cookie =/ edit: nevermind i solved it

did you do the real exam? and what were your thoughts?

How many retakes we can have?

What laptop do u use?

thanks for sharing \o/

Is exam free?

Thanks !

Wow 😀😯

I’m wapt and waptx certified

this exam is really hard

2nd

The video is good but don't be such a draaaaaaaaaaag!!!! bro and slow explaining it, it makes us fall sleep, Please explain it with sharp and confident voice broooh.