Burp Suite Certified Practitioner

Tips & tricks, a long journey

How to prepare https://portswigger.net/web-security/certification/how-to-prepare

Make sure you did not miss these labs https://portswigger.net/web-security/certification/how-to-prepare/practitioner-labs-prep-step-one

Take notes, from all labs, for example in cherrytree to quickly repeat learned attacks

Mystery Challenges - Sharp your pentest skills

Test your speed and improve your methodology

https://portswigger.net/web-security/certification/burp-challenge

Example Practice Exam https://portswigger.net/web-security/certification/practice-exam

Read Exam hints https://portswigger.net/web-security/certification/exam-hints-and-guidance

Pentest Arsenal

Labs cheet sheets, wordlists and tools. All you need in your pentest deck.

All labs

Remember you can seek out exploitation steps when you are lost

https://portswigger.net/web-security/all-labs

Username list

https://portswigger.net/web-security/authentication/auth-lab-usernames

Password list

https://portswigger.net/web-security/authentication/auth-lab-passwords

SQL Injection Cheat sheet

https://portswigger.net/web-security/sql-injection/cheat-sheet

XSS Cheat sheet

https://portswigger.net/web-security/cross-site-scripting/cheat-sheet

Obfuscation techniques

https://portswigger.net/web-security/essential-skills/obfuscating-attacks-using-encodings

Software

ysoserializer

wget 
https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar

HTTP Request smuggler extension

Exam Review - Tips & Tricks

Exam review from those who passed the exam

https://micahvandeusen.com/burp-suite-certified-practitioner-exam-review/micahvandeusen.com

How to get Burp Suite Certified Practitioner without die trying it.LinkedInEditors

GitHub - DingyShark/BurpSuiteCertifiedPractitioner: Ultimate Burp Suite Exam and PortSwigger Labs Guide.GitHub

GitHub - botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study: Burp Suite Certified Practitioner Exam StudyGitHub

Burp Suite Certified Practitioner Exam – Review | I'm Gaurav NarwaniI'm Gaurav Narwani | Security Researcher | Bug Bounty Hunter