I look forward to any other certifications that PortSwigger creates. It forced me to adapt some of my methodology to be faster and more focused.įrom the questionnaire after the exam, it sounds like this one is more targeted toward the practitioner level and another expert level certificate may be coming at some point. Compared with some of the exams from Offensive Security, the biggest adjustment was getting used to the much shorter time limit. Overall, it was a fun experience and I learned some things from the labs and the exam. The third exam I ran into the same exact vulnerability that stumped me the 2nd time but I was able to take a step back and figure it out. The second time I completed 5/6 of the exam and got stuck in a rabbit hole thinking there should be a different vulnerability than it actually was. Since then, PortSwigger has raised the time limit to 4 hours which helps. At the time, the exam was only 3 hours long and I was trying to get familiar with the platform while taking the exam and ran out of time. This was a mistake as you should be very familiar with the exploit server and how to use it to deliver payloads to the simulated users. I had only gone through several of the labs the first time I took the exam. The exam isn’t too difficult if you are well prepared. It took me three attempts to pass the exam and if you don’t make some of the mistakes I did you can likely pass in less. Stage 3 - Find a way to read the file at /home/carlos/secret
Stage 2 - Escalate privileges to the administrator account. Stage 1 - Get access to a low privileged user account. These vulnerabilities need to be exploited in order as each of the three stages gives you access to more of the application. The exam consists of two applications that have three vulnerabilities each that need identified and exploited. The typical price for this is $99 dollars, however, I purchased several attempts around Black Friday when they had it for $9 dollars. The following are my thoughts on the fairly recently released Burp Suite Certified Practitioner exam and some tips if you plan on taking it.
0 kommentar(er)
