Academy

PortSwigger Academy (also known as Web Security Academy), is a cool set of free online labs for web application security. It is provided by PortSwigger, developers of the Burpsuite tool. In addition to the labs, it offers a wide range of high-quality reading materials to help users learn about common web security vulnerabilities. After finishing the Academy, you are prepared to try an exam for a Burp Suite Certified Practitioner (BSCP) certification for web security professionals.

Most of the labs include an official solution and sometimes alternative solutions from the community. For this reason, the point is not to provide a write-up for all the labs. We will try to add write-ups in case we have something new to add and stick to the more difficult ones (practitioner or expert).

The Portswigger Academy write-ups available at the moment are the following.

Web LLM attacks