Hands-On Practice

Burp Suite Lab

Apply what you learned with these hands-on exercises. You will configure proxy, intercept traffic, brute force login forms, fuzz parameters, and detect injection vulnerabilities. Use intentionally vulnerable applications like dvwa, WebGoat, or PortSwigger Web Security Academy labs.

Burp Suite Hand-On Lab

Task 1 / 20

Task 1

Install & Configure Proxy

Install Burp Suite (or use pre-installed) and configure browser proxy to 127.0.0.1:8080. Verify HTTPS interception works by browsing to http://example.com and http://burpsuite.

Your Answer / Command

How to Practice for Real

Use PortSwigger's free Web Security Academy (academy.portswigger.net) — it provides dozens of interactive labs with built-in targets and step-by-step guidance. Also try DVWA (Damn Vulnerable Web App), bWAPP, or HackTheBox web challenges. Always test only on systems you are authorized to test.

Back to Burp Suite Module